CVE-2026-85982

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

September 11, 2026

Last Seen

October 24, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Okta Patches Critical Vulnerabilities Enabling XSS, Auth Bypass, and SQL Injection72.0

Okta has issued security updates for three critical vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta Access Gateway. These vulnerabilities, disclosed on September 8, 2026, could allow authenticated attackers to execute stored cross-site scripting (XSS), bypass Protected Rule authorizat...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Okta Patches Critical Vulnerabilities Enabling XSS, Auth Bypass, and SQL Injection

Sep 11·3 sources

Related Entities

Cross-Site Scripting (xss)Denial of Service Sql Injection Stored Cross-Site Scripting Zero-day Exploit YouTube And SEO Poisoning Campaign CVE-2026-78626 CVE-2026-78623 CVE-2026-107369 CVE-2026-107370 CVE-2026-107371 CVE-2026-109618

CVE-2026-85982

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Okta Patches Critical Vulnerabilities Enabling XSS, Auth Bypass, and SQL Injection

Related Articles (3)

OAG advisories

CVE-2026-85982

Okta Patches Auth0 and Access Gateway Vulnerabilities Let Attackers Enable XSS ...

Related Entities