CVE-2026-78625 — Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during …
Published: 2026-09-08 · CVSS: 6.7 · CVSS 3.1
The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated file is automatically included during authentication requests, resulting in execution with the privileges of the web server process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7