Vendor
Okta
- CVEs tracked · all time
- 6
- in CISA KEV · all time
- 0
- article · since 11 Sep
- 1
- articles · all time
- 2
One article in the last 45 daysThe latest: SecurityOnline, Fri 23 Oct, 04:30 UTC.See the full timeline
Products: Okta Access Gateway, Okta Hyperdrive Integration Plugin
CVEs
6 CVEsCVE-2026-115547Command Execution via Admin Console Input in Okta Access GatewayCVSS9.1Critical–Not in KEV0.4%EPSS1article
CVE-2026-115546Authentication Source Verification Issue in Okta Access GatewayCVSS8.1High–Not in KEV0.4%EPSS1article
CVE-2026-78626Improper Input Sanitization in Okta Access Gateway Protected RulesCVSS8.1High–Not in KEV0.4%EPSS1article
CVE-2026-78623Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode DatastoresCVSS7.7High–Not in KEV0.5%EPSS1article
CVE-2026-78574Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry HandlingCVSS7.5High–Not in KEV0.1%EPSS1article
CVE-2026-78627Improper Credential Protection in Okta Hyperdrive Integration Installer LoggingCVSS7.3High–Not in KEV0.1%EPSS1article
- Okta fixes critical Access Gateway flaws enabling remote code executionSecurityOnline
- Okta Patches Six Flaws Enabling Access Bypass and Secret TheftSecurityOnline · first in our coverage