CVE-2026-78625 in Access Gatewayinfo

Summary

by MITRE • 09/08/2026

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsible

Okta

Reservation

08/25/2026

Disclosure

09/08/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-78625
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-78625
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-78625/

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!