CVE-2026-78550Improper Input Handling in Okta Access Gateway Management Console Exception Handler

Descripción

The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• https://trust.okta.com/security-advisories/improper-input-handling-in-okta-access-gateway-management-console-… Vendor Advisory