CVE ID :CVE-2026-115546
Published : Oct. 23, 2026, 3:06 a.m. | 51 minutes ago
Description :Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console.
Severity: 8.1 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-115546 - Authentication Source Verification Issue in Okta Access Gateway
CVE ID :CVE-2026-115546 Published : Oct. 23, 2026, 3:06 a.m. | 51 minutes ago Description :Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...