CVE-2026-78550 — Improper Input Handling in Okta Access Gateway Management Console Exception Handler
The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsaniti…
Published: 2026-09-08 · CVSS: 6.6 · CVSS 3.1
The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7