CVEs for Okta
36 matching vulnerabilities, 0 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first.
CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed.
Dates are the CVE publish date (or the KEV date added). Times are shown in UTC.
Each column is one week (Monday start, UTC), stacked by CVSS severity, by published date or the KEV date added. Dots mark entries added to CISA KEV that week. The last week is still in progress.
CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway
CVSS 9.1 criticalEPSS 0.49%Okta
CVE-2026-115546 Authentication Source Verification Issue in Okta Access Gateway
CVSS 8.1 highEPSS 0.42%Okta
CVE-2026-78633 Denial of Service in Okta RADIUS Agent Packet Parser
CVSS 6.5 mediumEPSS 0.21%Okta
CVE-2026-78632 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer
CVSS 5.3 mediumEPSS 0.07%Okta
CVE-2026-78628 Improper Input Validation in the Okta Credential Provider for Windows
CVSS 6.0 mediumEPSS 0.13%Okta
CVE-2026-78622 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
CVSS 6.0 mediumEPSS 0.13%Okta
CVE-2026-78631 Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging
CVSS 5.3 mediumEPSS 0.14%Okta
CVE-2026-78630 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing
CVSS 6.7 mediumEPSS 0.22%Okta
CVE-2026-78620 Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
CVSS 5.9 mediumEPSS 0.34%Okta
CVE-2026-78579 Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
CVSS 6.8 mediumEPSS 0.33%Okta
CVE-2026-78626 Improper Input Sanitization in Okta Access Gateway Protected Rules
CVSS 8.1 highEPSS 0.36%Okta
CVE-2026-78624 Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
CVSS 4.9 mediumEPSS 0.46%Okta
CVE-2026-78552 Validation Bypass in Okta Access Gateway Custom Directives
CVSS 6.0 mediumEPSS 0.39%Okta
CVE-2026-78550 Improper Input Handling in Okta Access Gateway Management Console Exception Handler
CVSS 6.6 mediumEPSS 0.38%Okta
CVE-2026-78545 Improper Input Sanitization in Okta Access Gateway Application Label Configuration
CVSS 6.6 mediumEPSS 0.38%Okta
CVE-2026-77585 Improper Validation of SSH Target in Okta Privileged Access Client
CVSS 5.3 mediumEPSS 0.14%Okta
CVE-2025-67505 Race condition in the Okta Java SDK
CVSS 8.4 highEPSS 0.21%Okta
CVE-2025-66033 Improper Memory Cleanup in the Okta Java SDK
CVSS 5.3 mediumEPSS 0.27%Okta
CVSS 6.8 mediumEPSS 0.33%Okta
CVSS 7.1 highEPSS 0.24%Okta
CVSS 7.1 highEPSS 0.24%Okta
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)