Login Request a demo
OA
Product
Okta Access Gateway
by Okta · last CVE Oct 23, 2026
13
CVEs
0
On KEV
9.9
Max CVSS
2
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 2High 3Medium 8Low 0
Severity
All severities13Critical2High3Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Okta Access Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78623
9.9
0%
Sep 8
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
Affected: before 2026.9.1
CVE-2026-115547
New
9.1
1%
Oct 23
Command Execution via Admin Console Input in Okta Access Gateway
Affected: before 2026.10.2
CVE-2026-115546
New
8.1
0%
Oct 23
Authentication Source Verification Issue in Okta Access Gateway
Affected: before 2026.10.2
CVE-2026-78550
7.2
0%
Sep 8
Improper Input Handling in Okta Access Gateway Management Console Exception Handler
Affected: before 2026.9.1
CVE-2026-78545
7.2
0%
Sep 8
Improper Input Sanitization in Okta Access Gateway Application Label Configuration
Affected: before 2026.9.1
CVE-2026-78630
6.7
0%
Sep 8
Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
Affected: before 2026.9.1
CVE-2026-78625
6.7
0%
Sep 8
Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
Affected: before 2026.9.1
CVE-2026-78579
6.5
0%
Sep 8
Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
Affected: before 2026.9.1
CVE-2026-78626
6.5
0%
Sep 8
Improper Input Sanitization in Okta Access Gateway Protected Rules
Affected: before 2026.9.1
CVE-2026-78560
6.5
0%
Sep 8
Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
Affected: before 2026.9.1
CVE-2026-78620
4.9
0%
Sep 8
Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
Affected: before 2026.9.1
CVE-2026-78624
4.9
0%
Sep 8
Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
Affected: before 2026.9.1
CVE-2026-78552
4.9
0%
Sep 8
Validation Bypass in Okta Access Gateway Custom Directives
Affected: before 2026.9.1
Showing 13