Critical Okta Access Gateway Flaw Could Let Admin-Level Input Trigger System Commands
Okta has published an advisory about a high-severity vulnerability in Okta Access Gateway that can allow specially crafted administrative input to trigger system command execution inside the appliance. The issue highlights the continuing importance of limiting and monitoring privileged access to management consoles and of applying vendor patches quickly when they address control-plane weaknesses. What happened Okta disclosed CVE-2026-115547, a vulnerability affecting Okta Access Gateway releases prior to 2026.10.2. According…