MEDIUM 6.7 NVD

CVE-2026-78625

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically

The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.

References

https://trust.okta.com/security-advisories/insufficient-validation-of-dashboard-applicatio

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This medium severity vulnerability with a CVSS score of 6.7 was published on 2026-09-08 via NVD.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.