CVE-2026-78550

תיאור (מקור, אנגלית)

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.

מדדים

CVSS 3.1

7.2 (HIGH) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-10/10/2026

CWE

CWE-95

מוצרים מושפעים

okta: access gateway

קישורים

• https://trust.okta.com/security-advisories/improper-input-handling-in-okta-acc‮… Vendor Advisory