Improper Input Neutralization in Okta Access Gateway

CVE-2026-78630

What is CVE-2026-78630?

The Okta Access Gateway is vulnerable due to improper input neutralization in its SNMP configuration processing. This flaw allows an authenticated local user with access to the management interface to inject malicious SNMP configuration values. When these crafted inputs are passed to a privileged script for command construction, it can result in the execution of arbitrary OS commands with root privileges, potentially compromising system integrity and security.

References