MEDIUM 5.3 NVD

CVE-2026-77585

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a comm

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

References

https://trust.okta.com/security-advisories/improper-validation-ssh-target-in-okta-privileg

Published: 2026-08-25 · Source: NVD · Feed updated: 2026-08-25

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-08-25 via NVD.

vulnfeed aggregates 11950 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.