Okta vulnerabilities
38 CVEs and advisories name Okta as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-115547Command Execution via Admin Console Input in Okta Access Gateway
- CVE-2026-115546Authentication Source Verification Issue in Okta Access Gateway
- CVE-2026-78633Denial of Service in Okta RADIUS Agent Packet Parser
- CVE-2026-78632Insecure Default File Permissions in Okta RADIUS Agent Windows Installer
- CVE-2026-78628Improper Input Validation in the Okta Credential Provider for Windows
- CVE-2026-78622Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
- CVE-2026-78631Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
- CVE-2026-78630Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
- CVE-2026-78629Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling
- CVE-2026-78635Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument
- CVE-2026-78620Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
- CVE-2026-78579Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
- CVE-2026-78627Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
- CVE-2026-78574Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
- CVE-2026-78626Improper Input Sanitization in Okta Access Gateway Protected Rules
- CVE-2026-78625Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration
- CVE-2026-78624Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
- CVE-2026-78560Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source
- CVE-2026-78552Validation Bypass in Okta Access Gateway Custom Directives
- CVE-2026-78623Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
- CVE-2026-78550Improper Input Handling in Okta Access Gateway Management Console Exception Handler
- CVE-2026-78545Improper Input Sanitization in Okta Access Gateway Application Label Configuration
- CVE-2026-77585Improper Validation of SSH Target in Okta Privileged Access Client
- CVE-2025-67505Race condition in the Okta Java SDK
- CVE-2025-66033Improper Memory Cleanup in the Okta Java SDK
- CVE-2025-7371Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets.
- CVE-2024-9875Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo comm
- CVE-2024-9191The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables a
- CVE-2024-10327A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification responses through the iOS
- CVE-2024-7061Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking.