What’s Vulnerable › Products

Okta Access Gateway vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Okta Access Gateway version is affected

Latest Okta Access Gateway vulnerabilities

• CVE-2026-115547 — Command Execution via Admin Console Input in Okta Access Gateway (CVSS 9.1)
• CVE-2026-115546 — Authentication Source Verification Issue in Okta Access Gateway (CVSS 8.1)
• CVE-2026-78630 — Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing (CVSS 6.7)
• CVE-2026-78626 — Improper Input Sanitization in Okta Access Gateway Protected Rules (CVSS 6.5)
• CVE-2026-78625 — Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration (CVSS 6.7)
• CVE-2026-78624 — Improper Path Validation in Okta Access Gateway Backup and Restore Functionality (CVSS 4.9)
• CVE-2026-78623 — Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores (CVSS 9.9)
• CVE-2026-78620 — Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling (CVSS 4.9)
• CVE-2026-78579 — Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation (CVSS 6.5)
• CVE-2026-78560 — Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source (CVSS 6.5)
• CVE-2026-78552 — Validation Bypass in Okta Access Gateway Custom Directives (CVSS 4.9)
• CVE-2026-78550 — Improper Input Handling in Okta Access Gateway Management Console Exception Handler (CVSS 7.2)
• CVE-2026-78545 — Improper Input Sanitization in Okta Access Gateway Application Label Configuration (CVSS 7.2)
• CVE-2021-28113 — (CVSS 6.7)