The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.
2026年9月9日
CVE-2026-78550 [MEDIUM] – The Okta Access Gateway management console passes user-supplied input to eval() without sa
📑 文章目录



