Auth0 AD/LDAP Connector

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 11, 2026
Last mentionedSep 11, 2026

Timeline

2 articles · newest first

Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS, Authentication Bypass and SQL Injection

Okta patches three high-severity flaws in Auth0 AD/LDAP Connector and Access Gateway: stored XSS, auth bypass, SQL injection.

GBHackersSep 11, 09:42 UTC · Sep 11, 2026VulnerabilityCVE-2026-85982 CVE-2026-78626 CVE-2026-786237

Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection

Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.

Cyber Security NewsSep 11, 08:13 UTC · Sep 11, 2026VulnerabilityCVE-2026-85982 CVE-2026-78626 CVE-2026-786235 · 1 read

Related CVEs

by mentions

CVE-2026-78623<1%9.9
SQL Injection in Okta Access Gateway via Unsanitized SAML Assertion Values
published Sep 8, 2026Okta Access Gateway
CVE-2026-85982<1%9.0
Stored XSS in Auth0 AD/LDAP Connector Admin Panel
published Sep 8, 2026Okta (Auth0) Auth0 AD/LDAP Connector
CVE-2026-78626<1%6.5
Authorization Bypass in Okta Access Gateway Protected Rule Checks
published Sep 8, 2026Okta Access Gateway

Appears with

Oktavendor · 2
Okta Access Gatewayproduct · 2
Auth0vendor · 2
Oktaorganization · 2

Entities are extracted by the model from each article. First seen Sep 11, 2026, last mentioned Sep 11, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.