Skip to content
Okta Patches Critical Command Execution Flaw in Access Gateway

Okta Patches Critical Command Execution Flaw in Access Gateway

First seen 24 Oct 2026, 18:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 24, 2026 at 19:46 UTC
  • •CVE-2026-115547 allows command execution via input validation flaws in the Admin Console.
  • •Okta Access Gateway versions prior to 2026.10.2 are affected by critical vulnerabilities.
  • •Immediate upgrade to version 2026.10.2 is recommended to mitigate risks.

Okta has released patches for critical vulnerabilities in the Okta Access Gateway, including CVE-2026-115547, which allows authenticated administrators to execute system commands via input validation flaws. This vulnerability, rated 9.1 on the CVSS scale, affects all versions prior to 2026.10.2. Another flaw, CVE-2026-115546, allows an authenticated user to bypass authentication source verification, rated 8.1. Both vulnerabilities require administrative access to exploit. Okta's advisories do not report any in the wild but recommend immediate upgrades to version 2026.10.2 or later. The updates also address PHP2Shell vulnerabilities affecting OAG appliances running PHP 8.3.x. The flaws were disclosed on October 22, 2026, and the patches were made available on October 23, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2021-04-02
CVE-2021-28113 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-08
CVE-2026-78625 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-09-08
CVE-2026-78630 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-21
PHP vulnerabilities disclosed
Okta acknowledged PHP2Shell vulnerabilities affecting OAG appliances running PHP 8.3.x, requiring urgent updates.
trust.okta.com
2026-10-21
CVE-2026-109618 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-21
CVE-2026-109619 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-22
Vulnerabilities disclosed
Okta disclosed multiple vulnerabilities in the Access Gateway, including CVE-2026-115547 and CVE-2026-115546.
Cyberkendra
2026-10-23
Patches released
Okta released patches for critical vulnerabilities in the Access Gateway, advising upgrades to version 2026.10.2 or later.
Cyberkendra
2026-10-23
CVE-2026-115547 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-23
CVE-2026-115546 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE

More articles in this cluster (6)

Following this threat?

Track Okta and CVE-2021-28113 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3

Common questions

Which versions of Okta Access Gateway are affected?
All versions prior to 2026.10.2 are affected by the vulnerabilities.
What should I do to protect my systems?
Upgrade your Okta Access Gateway to version 2026.10.2 or later immediately.
Are these vulnerabilities currently being exploited?
There are no confirmed reports of active exploitation in the wild for these vulnerabilities.