CVE-2026-78550 in Access Gatewayinformación

Resumen

por MITRE • 2026-09-08

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Okta

Reservar

2026-08-24

Divulgación

2026-09-08

Moderación

aceptado

Artículo

VDB-400470

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-78550
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-78550
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-78550/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!