CVE-2026-115547Critical· 9.1▾ MidnightAn input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account.
access_gateway < 2026.10.2Upgrade the Okta Access Gateway appliance to version 2026.10.2 or greater.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115546High· 8.1Authentication Source Verification Issue in Okta Access Gateway
CVE-2026-78628Medium· 6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure
CVE-2026-78625Medium· 6.7The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files
CVE-2026-78545Medium· 6.6The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file
CVE-2026-78633Medium· 6.5The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute
CVE-2026-78632Medium· 5.3The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs