{"schema_version":1,"title":"Okta Access Gateway vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 11 vulnerabilities in Okta Access Gateway: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-78630, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/access-gateway","json_url":"https://junglewise.ai/threats/technologies/access-gateway.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/access-gateway","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":2,"all_time":11,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":11,"last_90_days":11,"last_365_days":11},"latest":[{"cve":"CVE-2026-78630","cvss":6.7,"epss":0.0022,"slug":"cve-2026-78630-okta-access-gateway-os-command-injection-in-snmp-configuration","title":"Okta Access Gateway OS command injection in SNMP configuration","severity":"medium","exploited":false,"published_at":"2026-09-08T21:18:41.457+00:00","url":"https://junglewise.ai/threats/cve-2026-78630-okta-access-gateway-os-command-injection-in-snmp-configuration"},{"cve":"CVE-2026-78626","cvss":8.1,"epss":0.0036,"slug":"cve-2026-78626-okta-access-gateway-authorization-bypass-in-protected-rules","title":"Okta Access Gateway authorization bypass in Protected Rules","severity":"high","exploited":false,"published_at":"2026-09-08T20:18:38.07+00:00","url":"https://junglewise.ai/threats/cve-2026-78626-okta-access-gateway-authorization-bypass-in-protected-rules"},{"cve":"CVE-2026-78625","cvss":6.7,"epss":0.0023,"slug":"cve-2026-78625-okta-access-gateway-code-injection-in-dashboard-labels","title":"Okta Access Gateway code injection in dashboard labels","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:37.647+00:00","url":"https://junglewise.ai/threats/cve-2026-78625-okta-access-gateway-code-injection-in-dashboard-labels"},{"cve":"CVE-2026-78624","cvss":4.9,"epss":0.0046,"slug":"cve-2026-78624-okta-access-gateway-path-traversal-in-backup-restore","title":"Okta Access Gateway path traversal in backup restore","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:37.397+00:00","url":"https://junglewise.ai/threats/cve-2026-78624-okta-access-gateway-path-traversal-in-backup-restore"},{"cve":"CVE-2026-78623","cvss":7.7,"epss":0.0045,"slug":"cve-2026-78623-okta-access-gateway-sql-injection-in-saml-assertion-handling","title":"Okta Access Gateway SQL injection in SAML assertion handling","severity":"high","exploited":false,"published_at":"2026-09-08T20:18:37.05+00:00","url":"https://junglewise.ai/threats/cve-2026-78623-okta-access-gateway-sql-injection-in-saml-assertion-handling"},{"cve":"CVE-2026-78620","cvss":5.9,"epss":0.0034,"slug":"cve-2026-78620-okta-access-gateway-arbitrary-file-write-in-kerberos","title":"Okta Access Gateway arbitrary file write in Kerberos configuration handler","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.777+00:00","url":"https://junglewise.ai/threats/cve-2026-78620-okta-access-gateway-arbitrary-file-write-in-kerberos"},{"cve":"CVE-2026-78579","cvss":6.8,"epss":0.0024,"slug":"cve-2026-78579-okta-access-gateway-ldap-injection-in-datastore-filter","title":"Okta Access Gateway LDAP injection in datastore filter","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.59+00:00","url":"https://junglewise.ai/threats/cve-2026-78579-okta-access-gateway-ldap-injection-in-datastore-filter"},{"cve":"CVE-2026-78560","cvss":4.8,"epss":0.002,"slug":"cve-2026-78560-okta-access-gateway-authentication-bypass-in-pass-through-source","title":"Okta Access Gateway authentication bypass in pass-through source","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.22+00:00","url":"https://junglewise.ai/threats/cve-2026-78560-okta-access-gateway-authentication-bypass-in-pass-through-source"},{"cve":"CVE-2026-78552","cvss":6,"epss":0.0027,"slug":"cve-2026-78552-okta-access-gateway-validation-bypass-in-custom-directives","title":"Okta Access Gateway validation bypass in custom directives","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.073+00:00","url":"https://junglewise.ai/threats/cve-2026-78552-okta-access-gateway-validation-bypass-in-custom-directives"},{"cve":"CVE-2026-78550","cvss":6.6,"epss":0.0049,"slug":"cve-2026-78550-okta-access-gateway-code-injection-in-management-console","title":"Okta Access Gateway code injection in management console","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:35.937+00:00","url":"https://junglewise.ai/threats/cve-2026-78550-okta-access-gateway-code-injection-in-management-console"},{"cve":"CVE-2026-78545","cvss":6.6,"epss":0.0049,"slug":"cve-2026-78545-okta-access-gateway-code-injection-in-application-label","title":"Okta Access Gateway code injection in application label","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:35.727+00:00","url":"https://junglewise.ai/threats/cve-2026-78545-okta-access-gateway-code-injection-in-application-label"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Okta Hyperdrive","slug":"hyperdrive","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/hyperdrive"}],"technology":{"hub":true,"name":"Okta Access Gateway","slug":"access-gateway","vendor":{"name":"Okta","slug":"okta","url":"https://junglewise.ai/threats/vendors/okta"},"aliases":[],"category":"appliance","url":"https://junglewise.ai/threats/technologies/access-gateway"},"most_severe":[{"cve":"CVE-2026-78626","cvss":8.1,"epss":0.0036,"slug":"cve-2026-78626-okta-access-gateway-authorization-bypass-in-protected-rules","title":"Okta Access Gateway authorization bypass in Protected Rules","severity":"high","exploited":false,"published_at":"2026-09-08T20:18:38.07+00:00","url":"https://junglewise.ai/threats/cve-2026-78626-okta-access-gateway-authorization-bypass-in-protected-rules"},{"cve":"CVE-2026-78623","cvss":7.7,"epss":0.0045,"slug":"cve-2026-78623-okta-access-gateway-sql-injection-in-saml-assertion-handling","title":"Okta Access Gateway SQL injection in SAML assertion handling","severity":"high","exploited":false,"published_at":"2026-09-08T20:18:37.05+00:00","url":"https://junglewise.ai/threats/cve-2026-78623-okta-access-gateway-sql-injection-in-saml-assertion-handling"},{"cve":"CVE-2026-78579","cvss":6.8,"epss":0.0024,"slug":"cve-2026-78579-okta-access-gateway-ldap-injection-in-datastore-filter","title":"Okta Access Gateway LDAP injection in datastore filter","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.59+00:00","url":"https://junglewise.ai/threats/cve-2026-78579-okta-access-gateway-ldap-injection-in-datastore-filter"},{"cve":"CVE-2026-78625","cvss":6.7,"epss":0.0023,"slug":"cve-2026-78625-okta-access-gateway-code-injection-in-dashboard-labels","title":"Okta Access Gateway code injection in dashboard labels","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:37.647+00:00","url":"https://junglewise.ai/threats/cve-2026-78625-okta-access-gateway-code-injection-in-dashboard-labels"},{"cve":"CVE-2026-78630","cvss":6.7,"epss":0.0022,"slug":"cve-2026-78630-okta-access-gateway-os-command-injection-in-snmp-configuration","title":"Okta Access Gateway OS command injection in SNMP configuration","severity":"medium","exploited":false,"published_at":"2026-09-08T21:18:41.457+00:00","url":"https://junglewise.ai/threats/cve-2026-78630-okta-access-gateway-os-command-injection-in-snmp-configuration"},{"cve":"CVE-2026-78550","cvss":6.6,"epss":0.0049,"slug":"cve-2026-78550-okta-access-gateway-code-injection-in-management-console","title":"Okta Access Gateway code injection in management console","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:35.937+00:00","url":"https://junglewise.ai/threats/cve-2026-78550-okta-access-gateway-code-injection-in-management-console"},{"cve":"CVE-2026-78545","cvss":6.6,"epss":0.0049,"slug":"cve-2026-78545-okta-access-gateway-code-injection-in-application-label","title":"Okta Access Gateway code injection in application label","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:35.727+00:00","url":"https://junglewise.ai/threats/cve-2026-78545-okta-access-gateway-code-injection-in-application-label"},{"cve":"CVE-2026-78552","cvss":6,"epss":0.0027,"slug":"cve-2026-78552-okta-access-gateway-validation-bypass-in-custom-directives","title":"Okta Access Gateway validation bypass in custom directives","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.073+00:00","url":"https://junglewise.ai/threats/cve-2026-78552-okta-access-gateway-validation-bypass-in-custom-directives"},{"cve":"CVE-2026-78620","cvss":5.9,"epss":0.0034,"slug":"cve-2026-78620-okta-access-gateway-arbitrary-file-write-in-kerberos","title":"Okta Access Gateway arbitrary file write in Kerberos configuration handler","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:36.777+00:00","url":"https://junglewise.ai/threats/cve-2026-78620-okta-access-gateway-arbitrary-file-write-in-kerberos"},{"cve":"CVE-2026-78624","cvss":4.9,"epss":0.0046,"slug":"cve-2026-78624-okta-access-gateway-path-traversal-in-backup-restore","title":"Okta Access Gateway path traversal in backup restore","severity":"medium","exploited":false,"published_at":"2026-09-08T20:18:37.397+00:00","url":"https://junglewise.ai/threats/cve-2026-78624-okta-access-gateway-path-traversal-in-backup-restore"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}