# Okta in September 2026: incidents, uptime and changes

> Okta in September 2026: 3 incidents on its status page (2 major or critical), 93.33% free of major or critical incidents (vendor-reported), 2 deprecations, 21 CVEs. From Rewindex’s archive of Okta’s status, pricing and policy pages.

Canonical: https://rewindex.com/company/okta/2026/09
Last updated: 2026-10-16T04:00:00Z

- Incidents posted: 3 (major/critical: 2) · Maintenance: 0
- By vendor impact label: major 2, minor 1
- Uptime (vendor-reported): 93.33% free of major/critical incidents, 90.00% free of any incident; outage time 2.0 days, incident time 3.0 days
- Price changes: 0 · Pricing/legal/trust page changes: 0 · Deprecations: 2 · CVEs: 21
- Previous month: [August 2026](https://rewindex.com/company/okta/2026/08.md) · Next: [October 2026](https://rewindex.com/company/okta/2026/10.md) · [All months](https://rewindex.com/company/okta/reports.md) · [Okta](https://rewindex.com/company/okta.md)

_Uptime: Derived from the incidents the vendor posted on its own status page, not measured by us. A minute counts as an outage minute when a major or critical incident (as the vendor labelled it) was open; incident minutes include minor ones too. Maintenance and incidents marked "no impact" are left out, overlapping incidents are merged, a resolved incident counts for at most 7 days, and one still open with no resolution counts for at most 24 hours._

## Major and critical incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Issues with Custom Domains in Cell OK9](https://rewindex.com/company/okta/incidents/I-11432.md) | major | 2026-09-11 12:10 UTC | not resolved | ongoing | resolved |
| [Intermittent Access Issues with Office 365 Apps via Okta](https://rewindex.com/company/okta/incidents/I-11462.md) | major | 2026-09-15 15:15 UTC | not resolved | ongoing | resolved |

## All incidents

| Incident | Impact (vendor label) | Started (UTC) | Resolved (UTC) | Duration | Status |
| --- | --- | --- | --- | --- | --- |
| [Error 500 observed in OP1](https://rewindex.com/company/okta/incidents/I-11355.md) | minor | 2026-09-03 09:30 UTC | not resolved | ongoing | resolved |
| [Issues with Custom Domains in Cell OK9](https://rewindex.com/company/okta/incidents/I-11432.md) | major | 2026-09-11 12:10 UTC | not resolved | ongoing | resolved |
| [Intermittent Access Issues with Office 365 Apps via Okta](https://rewindex.com/company/okta/incidents/I-11462.md) | major | 2026-09-15 15:15 UTC | not resolved | ongoing | resolved |

## Deprecations and commercial changes

- [Okta Classic Engine Self-Service Registration](https://deadcanary.io/event/okta-okta-classic-engine-self-service-registration-808e/) (Okta Classic Engine Self-Service Registration): announced 2026-09-18, effective 2027-03-05
- [Classic Engine SSR / Desktop SSO / Device Trust EOL](https://deadcanary.io/event/okta-classic-engine-ssr-desktop-sso-device-trust-eol-e186/) (Classic Engine SSR / Desktop SSO / Device Trust EOL): announced 2026-09-18, effective 2027-03-05

## CVEs published

- [CVE-2026-78545](https://rewindex.com/cve/CVE-2026-78545.md) Improper Input Sanitization in Okta Access Gateway Application Label Configuration (CVSS 6.6), published 2026-09-08
- [CVE-2026-78550](https://rewindex.com/cve/CVE-2026-78550.md) Improper Input Handling in Okta Access Gateway Management Console Exception Handler (CVSS 6.6), published 2026-09-08
- [CVE-2026-78623](https://rewindex.com/cve/CVE-2026-78623.md) Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores (CVSS 7.7), published 2026-09-08
- [CVE-2026-78552](https://rewindex.com/cve/CVE-2026-78552.md) Validation Bypass in Okta Access Gateway Custom Directives (CVSS 6.0), published 2026-09-08
- [CVE-2026-78560](https://rewindex.com/cve/CVE-2026-78560.md) Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source (CVSS 4.8), published 2026-09-08
- [CVE-2026-78624](https://rewindex.com/cve/CVE-2026-78624.md) Improper Path Validation in Okta Access Gateway Backup and Restore Functionality (CVSS 4.9), published 2026-09-08
- [CVE-2026-78625](https://rewindex.com/cve/CVE-2026-78625.md) Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration (CVSS 6.7), published 2026-09-08
- [CVE-2026-78626](https://rewindex.com/cve/CVE-2026-78626.md) Improper Input Sanitization in Okta Access Gateway Protected Rules (CVSS 8.1), published 2026-09-08
- [CVE-2026-78574](https://rewindex.com/cve/CVE-2026-78574.md) Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling (CVSS 7.5), published 2026-09-08
- [CVE-2026-78627](https://rewindex.com/cve/CVE-2026-78627.md) Improper Credential Protection in Okta Hyperdrive Integration Installer Logging (CVSS 7.3), published 2026-09-08
- [CVE-2026-78579](https://rewindex.com/cve/CVE-2026-78579.md) Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation (CVSS 6.8), published 2026-09-08
- [CVE-2026-78620](https://rewindex.com/cve/CVE-2026-78620.md) Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling (CVSS 5.9), published 2026-09-08
- [CVE-2026-78635](https://rewindex.com/cve/CVE-2026-78635.md) Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument (CVSS 5.0), published 2026-09-08
- [CVE-2026-78629](https://rewindex.com/cve/CVE-2026-78629.md) Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling (CVSS 5.6), published 2026-09-08
- [CVE-2026-78630](https://rewindex.com/cve/CVE-2026-78630.md) Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing (CVSS 6.7), published 2026-09-08
- [CVE-2026-78631](https://rewindex.com/cve/CVE-2026-78631.md) Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging (CVSS 5.3), published 2026-09-08
- [CVE-2026-78622](https://rewindex.com/cve/CVE-2026-78622.md) Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal (CVSS 6.0), published 2026-09-08
- [CVE-2026-85981](https://rewindex.com/cve/CVE-2026-85981.md) Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector (CVSS 6.7), published 2026-09-08
- [CVE-2026-85982](https://rewindex.com/cve/CVE-2026-85982.md) Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector (CVSS 9.0), published 2026-09-08
- [CVE-2026-85983](https://rewindex.com/cve/CVE-2026-85983.md) Local Privilege Escalation in Auth0 AD/LDAP Connector (CVSS 7.8), published 2026-09-08
- [CVE-2026-84685](https://rewindex.com/cve/CVE-2026-84685.md) Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management (CVSS 6.5), published 2026-09-08

## Cite this

Okta posted 3 status incidents in September 2026 (2 major or critical); 0 price changes and 0 notable page changes observed.

- Canonical URL: https://rewindex.com/company/okta/2026/09
- Citation: Okta, “Okta in September 2026” (2026-09-01 00:00 UTC). Archived by Rewindex: https://rewindex.com/company/okta/2026/09 (CC BY 4.0).
- Markdown link: `[Okta: Okta in September 2026 (2026-09-01)](https://rewindex.com/company/okta/2026/09)`


---
Canonical: https://rewindex.com/company/okta/2026/09 · Markdown: https://rewindex.com/company/okta/2026/09.md · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-11-04T16:34:15.366Z