CVE-2026-78550

Name of the Vulnerable Software and Affected Versions Okta Access Gateway (affected versions not specified)

Description The management console passes user-supplied input to the eval() function without proper sanitization during an authenticated administrator SSH session. This allows the unsanitized input to be executed directly, resulting in arbitrary code execution with the privileges of the management console.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.