
Okta Access Gateway before 2026.10.2 allows admin command execution
CVE-2026-115547 is scored 9.1 but needs Admin Console privileges, and the advisory reports no known exploitation.
1
4 stories, newest first · one card per story

CVE-2026-115547 is scored 9.1 but needs Admin Console privileges, and the advisory reports no known exploitation.

Okta is still investigating CVE-2026-109618 and CVE-2026-109619, with on-prem remediation unfinished.

Okta patches three high-severity flaws in Auth0 AD/LDAP Connector and Access Gateway: stored XSS, auth bypass, SQL injection.

Okta patched three flaws in Auth0 AD/LDAP Connector and Access Gateway, including a CVSS 9.0 stored XSS tracked as CVE-2026-85982.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views