MEDIUM 6.6 NVD

CVE-2026-78550

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a res

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.

References

https://trust.okta.com/security-advisories/improper-input-handling-in-okta-access-gateway-

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This medium severity vulnerability with a CVSS score of 6.6 was published on 2026-09-08 via NVD.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.