60
55
30
30
60
42
55
55
30
60
60
Week in review: Probing activity on Palo Alto Networks GlobalProtect portals, Patch Tuesday forecast
60
55
55
55
30
60
55
55
30
55
47
55
55
55
60
Fortinet Warned as Three Critical FortiSandbox Bugs Come Under Attack
60
55
30
60
42
60
Okta Fixes Auth0 and Access Gateway Flaws Enabling XSS, Auth Bypass, and SQL Injection
Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.
Okta disclosed and patched three vulnerabilities on September 8, 2026 affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. CVE-2026-85982 is a CVSS 9.0 stored XSS in the connector's admin panel caused by improper HTML encoding of directory search results and updater logs; CVE-2026-78626 is a CVSS 8.1 authorization bypass in Access Gateway Protected Rules; CVE-2026-78623 is a CVSS 7.7 SQL injection in advanced-mode datastores via unsanitized SAML assertion attributes. Fixes ship in connector version 8.0.0 and Access Gateway 2026.9.1; no exploitation has been reported.
45
Microsoft Patch Tuesday, February 2025 Edition
60
55
30
55
60
60
55