VYPR
← All advisories
High severity8.1NVD Advisory· Published Sep 8, 2026· Updated Sep 22, 2026

CVE-2026-78626

CVE-2026-78626

Description

The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Okta/Access Gateway2 versions
    cpe:2.3:a:okta:access_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:okta:access_gateway:*:*:*:*:*:*:*:*range: <2026.9.1
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

2