Log in Start free

Okta

Products

ProductCVEsExploitedLatest
Okta Access Gateway13–Oct 23, 2026
Okta Verify for Windows4–Sep 8, 2026
Okta Hyperdrive Integration Plugin2–Sep 8, 2026
Okta Hyperdrive Agent2–Sep 8, 2026
Okta Privileged Access Client2–Sep 8, 2026
Okta RADIUS Agent2–Oct 13, 2026
okta-sdk-java2–Dec 10, 2025
Okta Credential Provider for Windows1–Oct 13, 2026
Okta Verify for iOS1–Oct 24, 2024
Advanced Server Access1–Mar 6, 2023
Okta OIDC Middleware1–Jan 12, 2023
Okta On-Premises Provisioning Agent1–Jul 22, 2025
Advanced Server Access Client1–Mar 23, 2022
Okta Privileged Access Server Agent (SFTD)1–Nov 20, 2024
LDAP Agent1–Nov 8, 2023
Okta Active Directory Agent1–Sep 6, 2022
Okta Advanced Server Access Client1–Feb 21, 2022
Okta Browser Plugin1–Jul 23, 2024

Exploited and recent CVEs

  • CVE-2026-115547 Critical 9.1 Command Execution via Admin Console Input in Okta Access Gateway 0.5%
  • CVE-2026-115546 High 8.1 Authentication Source Verification Issue in Okta Access Gateway 0.4%
  • CVE-2026-78633 Medium 6.5 Denial of Service in Okta RADIUS Agent Packet Parser 0.2%
  • CVE-2026-78632 Medium 5.3 Insecure Default File Permissions in Okta RADIUS Agent Windows Installer <0.1%
  • CVE-2026-78628 Medium 6.0 Improper Input Validation in the Okta Credential Provider for Windows 0.1%
  • CVE-2026-78622 Medium 6.0 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal 0.1%
  • CVE-2026-78631 Medium 5.3 Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging 0.1%
  • CVE-2026-78630 Medium 6.7 Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing 0.2%
  • CVE-2026-78629 Medium 5.6 Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling 0.1%
  • CVE-2026-78635 Medium 5.0 Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument 0.2%
  • CVE-2026-78620 Medium 5.9 Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling 0.3%
  • CVE-2026-78579 Medium 6.8 Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation 0.3%
  • CVE-2026-78627 High 7.3 Improper Credential Protection in Okta Hyperdrive Integration Installer Logging 0.1%
  • CVE-2026-78574 High 7.5 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling 0.1%
  • CVE-2026-78626 High 8.1 Improper Input Sanitization in Okta Access Gateway Protected Rules 0.4%
  • CVE-2026-78625 Medium 6.7 Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration 0.2%
  • CVE-2026-78624 Medium 4.9 Improper Path Validation in Okta Access Gateway Backup and Restore Functionality 0.5%
  • CVE-2026-78560 Medium 4.8 Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source 0.3%
  • CVE-2026-78552 Medium 6.0 Validation Bypass in Okta Access Gateway Custom Directives 0.4%
  • CVE-2026-78623 High 7.7 Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores 0.4%
  • CVE-2026-78550 Medium 6.6 Improper Input Handling in Okta Access Gateway Management Console Exception Handler 0.4%
  • CVE-2026-78545 Medium 6.6 Improper Input Sanitization in Okta Access Gateway Application Label Configuration 0.4%
  • CVE-2026-77585 Medium 5.3 Improper Validation of SSH Target in Okta Privileged Access Client 0.1%
  • CVE-2025-67505 High 8.4 Race condition in the Okta Java SDK 0.2%
  • CVE-2025-66033 Medium 5.3 Improper Memory Cleanup in the Okta Java SDK 0.3%
  • CVE-2025-7371 Medium 6.8 Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agen 0.3%
  • CVE-2024-9875 High 7.1 Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerabil 0.2%
  • CVE-2024-9191 High 7.1 The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords assoc 0.2%
  • CVE-2024-10327 High 8.1 A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification responses through the iOS ContextExtension feature allowing the authentication to pro 0.6%
  • CVE-2024-7061 Medium 5.5 Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta Verify for Windows version 5.0.2. To remediate this vulnerability, upgrade to 5. 0.2%