CVE-2026-78624mediumCWE-22

CVE-2026-78624: fallo de gravedad media en Okta Access Gateway

Improper Path Validation in Okta Access Gateway Backup and Restore Functionality

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Okta Access Gateway

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.9epss 0.5%
The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Okta · Okta Access Gateway
CVEs relacionadas — Okta Access Gateway

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-115547CRITICALCommand Execution via Admin Console Input in Okta Access GatewayEPSS 0.5%CVE-2026-78623HIGHImproper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode DatastoresEPSS 0.4%CVE-2026-115546HIGHAuthentication Source Verification Issue in Okta Access GatewayEPSS 0.4%CVE-2026-78552MEDIUMValidation Bypass in Okta Access Gateway Custom DirectivesEPSS 0.4%CVE-2026-78550MEDIUMImproper Input Handling in Okta Access Gateway Management Console Exception HandlerEPSS 0.4%CVE-2026-78545MEDIUMImproper Input Sanitization in Okta Access Gateway Application Label ConfigurationEPSS 0.4%