Okta
Vulnerability activity for Okta: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 5
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 23
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 25
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.1HighOct 23, 2026Okta Access Gateway Auth bypass / access controlCVE-2026-115546Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console.
- 9.1CriticalOct 23, 2026Okta Access Gateway Code / command injectionCVE-2026-115547An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account.
- 6.5MediumOct 13, 2026Okta RADIUS Agent Denial of serviceCVE-2026-78633The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests.
- 5.3MediumOct 13, 2026Okta RADIUS Agent Privilege escalationCVE-2026-78632The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES en
- 6.0MediumOct 13, 2026Okta Credential Provider for WindowsCVE-2026-78628The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string offsets are not checked. Processing a malformed buffer can cause the credential provider process to terminate unexpectedly
- 6.0MediumSep 8, 2026Okta Verify for Windows Path traversal / file handlingCVE-2026-78622The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.
- 5.3MediumSep 8, 2026Okta Hyperdrive Agent Information disclosureCVE-2026-78631The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to t
- 6.7MediumSep 8, 2026Okta Access Gateway Code / command injectionCVE-2026-78630The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS comma
- 5.6MediumSep 8, 2026Okta Hyperdrive Agent Crypto / certificateCVE-2026-78629The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication verd
- 5.0MediumSep 8, 2026Okta Privileged Access Client Code / command injectionCVE-2026-78635The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag, cau
- 5.9MediumSep 8, 2026Okta Access Gateway Path traversal / file handlingCVE-2026-78620The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance filesyste
- 6.8MediumSep 8, 2026Okta Access GatewayCVE-2026-78579The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of the i
- 7.3HighSep 8, 2026Okta Hyperdrive Integration Plugin Information disclosureCVE-2026-78627The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the works
- 7.5HighSep 8, 2026Okta Hyperdrive Integration PluginCVE-2026-78574The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context
- 8.1HighSep 8, 2026Okta Access Gateway Auth bypass / access controlCVE-2026-78626The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources.
- 6.7MediumSep 8, 2026Okta Access Gateway Code / command injectionCVE-2026-78625The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.
- 4.9MediumSep 8, 2026Okta Access Gateway Path traversal / file handlingCVE-2026-78624The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.
- 4.8MediumSep 8, 2026Okta Access Gateway Auth bypass / access controlCVE-2026-78560The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to sanitize
- 6.0MediumSep 8, 2026Okta Access GatewayCVE-2026-78552The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives.
- 7.7HighSep 8, 2026Okta Access Gateway SQL injectionCVE-2026-78623The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string prior to preparation, resulting in unintended SQL execution against the
- 6.6MediumSep 8, 2026Okta Access Gateway Code / command injectionCVE-2026-78550The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.
- 6.6MediumSep 8, 2026Okta Access Gateway Code / command injectionCVE-2026-78545The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an nginx server block directive, resulting in execution of injected directives.
- 5.3MediumAug 25, 2026Okta Privileged Access Client Code / command injectionCVE-2026-77585The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.
- 8.4HighDec 10, 2025okta-sdk-javaCVE-2025-67505Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’
- 5.3MediumDec 10, 2025okta-sdk-java Denial of serviceCVE-2025-66033Okta Java Management SDK facilitates interactions with the Okta management API. In versions 21.0.0 through 24.0.0, specific multithreaded implementations may encounter memory issues as threads are not properly cleaned up after requests are completed. Over time, this can degrade performance and avail
- 6.8MediumJul 22, 2025Okta On-Premises Provisioning Agent Information disclosureCVE-2025-7371Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You
Top products
- Okta Access Gateway13 CVEs in the last year, 1 critical
- okta-sdk-java2 CVEs in the last year
- Okta RADIUS Agent2 CVEs in the last year
- Okta Privileged Access Client2 CVEs in the last year
- Okta Hyperdrive Integration Plugin2 CVEs in the last year
- Okta Hyperdrive Agent2 CVEs in the last year
- Okta Verify for Windows1 CVE in the last year
- Okta Credential Provider for Windows1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- Okta · Oct 22, 2026Command Execution via Admin Console Input in Okta Access Gateway CVE-2026-115547 - Oct 22, 2026CVE-2026-115547
- Okta · Oct 22, 2026Authentication Source Verification Issue in Okta Access Gateway CVE-2026-115546 - Oct 22, 2026CVE-2026-115546
- Okta · Oct 13, 2026Denial of Service in Okta RADIUS Agent Packet Parser CVE-2026-78633 - Oct 13, 2026CVE-2026-78633
- Okta · Oct 13, 2026Insecure Default File Permissions in Okta RADIUS Agent Windows Installer CVE-2026-78632 - Oct 13, 2026CVE-2026-78632
- Okta · Oct 13, 2026Improper Input Validation in the Okta Credential Provider for Windows CVE-2026-78628 - Oct 13, 2026CVE-2026-78628
- Okta · Sep 8, 2026Validation Bypass in Okta Access Gateway Custom Directives CVE-2026-78552 - Sep 8, 2026CVE-2026-78552
- Okta · Sep 8, 2026Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling CVE-2026-78629 - Sep 8, 2026CVE-2026-78629
- Okta · Sep 8, 2026Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration CVE-2026-78625 - Sep 8, 2026CVE-2026-78625
- Okta · Sep 8, 2026Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging CVE-2026-78631 - Sep 8, 2026CVE-2026-78631
- Okta · Sep 8, 2026Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling CVE-2026-78574 - Sep 8, 2026CVE-2026-78574
- Okta · Sep 8, 2026Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling CVE-2026-78620 - Sep 8, 2026CVE-2026-78620
- Okta · Sep 8, 2026Improper Input Sanitization in Okta Access Gateway Application Label Configuration CVE-2026-78545 - Sep 8, 2026CVE-2026-78545
- Okta · Sep 8, 2026Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing CVE-2026-78630 - Sep 8, 2026CVE-2026-78630
- Okta · Sep 8, 2026Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument CVE-2026-78635 - Sep 8, 2026CVE-2026-78635
- Okta · Sep 8, 2026Improper Path Validation in Okta Access Gateway Backup and Restore Functionality CVE-2026-78624 - Sep 8, 2026CVE-2026-78624
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.