CVE-2026-78626

תיאור (מקור, אנגלית)

The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources.

מדדים

CVSS 3.1

6.5 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-10/10/2026

CWE

CWE-863

מוצרים מושפעים

okta: access gateway

קישורים

• https://trust.okta.com/security-advisories/improper-input-sanitization-in-okta‮… Vendor Advisory