CVE-2026-78624 in Access Gateway

Résumé

par MITRE • 08/09/2026

The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Okta
• Réserver: 25/08/2026
• Divulgation: 08/09/2026
• Modérer: accepté
• Entrée: VDB-400478
• CPE: prêt
• CWE: CWE-22 (confirmé)
• CVSS: 4.9 (CNA)
• EPSS: 0.00000
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-78624
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-78624
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-78624/