Login Request a demo
AG
Product
Access Gateway
by Okta · last CVE Sep 8, 2026
12
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 2Medium 9Low 0
Severity
All severities12Critical1High2Medium9Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Access Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78623
9.9
0%
Sep 8
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
Affected: before 2026.9.1
CVE-2026-78550
7.2
0%
Sep 8
Improper Input Handling in Okta Access Gateway Management Console Exception Handler
Affected: before 2026.9.1
CVE-2026-78545
7.2
0%
Sep 8
Improper Input Sanitization in Okta Access Gateway Application Label Configuration
Affected: before 2026.9.1
CVE-2026-78630
6.7
0%
Sep 8
Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
Affected: before 2026.9.1
CVE-2026-78625
6.7
0%
Sep 8
Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
Affected: before 2026.9.1
CVE-2021-28113
6.7
23%
Apr 2
A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access…
Affected: through 2020.8.4
CVE-2026-78579
6.5
0%
Sep 8
Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
Affected: before 2026.9.1
CVE-2026-78626
6.5
0%
Sep 8
Improper Input Sanitization in Okta Access Gateway Protected Rules
Affected: before 2026.9.1
CVE-2026-78560
6.5
0%
Sep 8
Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
Affected: before 2026.9.1
CVE-2026-78620
4.9
0%
Sep 8
Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
Affected: before 2026.9.1
CVE-2026-78624
4.9
0%
Sep 8
Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
Affected: before 2026.9.1
CVE-2026-78552
4.9
0%
Sep 8
Validation Bypass in Okta Access Gateway Custom Directives
Affected: before 2026.9.1
Showing 12