CVE-2026-78625 in Access Gatewayinformación

Resumen

por MITRE • 2026-09-08

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

Okta

Reservar

2026-08-25

Divulgación

2026-09-08

Moderación

aceptado

Artículo

VDB-400468

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-78625
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-78625
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-78625/

◂ AnteriorVisión De ConjuntoPróximo ▸

Might our Artificial Intelligence support you?

Check our Alexa App!