HIGH 8.1 NVD

CVE-2026-115546

Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authe

Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console.

References

http://trust.okta.com/security-advisories/authentication-source-verification-issue-in-okta

Published: 2026-10-23 · Source: NVD · Feed updated: 2026-10-23

This high severity vulnerability with a CVSS score of 8.1 was published on 2026-10-23 via NVD.

vulnfeed aggregates 15176 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.