CVE-2026-115546— Authentication Source Verification Issue in Okta Access Gateway
Quick assessment
Affected
Okta Okta Access Gateway
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Okta 访问网关（OAG）在用户登录时未对选定的身份验证源进行验证。已拥有有效会话的认证用户可以修改身份验证源参数，从而可能生成一个授予管理控制台访问权限的 SAML 断言。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-115546
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication Source Verification Issue in Okta Access Gateway
Source: CVE Program / CVE List V5
Vulnerability Description
Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
通过用户控制密钥绕过授权机制
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Okta | Okta Access Gateway | 0 ~ 2026.10.2 | - |
|
II. Public POCs for CVE-2026-115546
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-115546
请登录查看更多情报信息。
Other References for CVE-2026-115546 (1)
IV. Related Vulnerabilities
Same product: Okta Access Gateway
-
CVE-2026-115547
Command Execution via Admin Console Input in Okta Access Gat -
CVE-2026-78630
Improper Input Neutralization in Okta Access Gateway SNMP Co -
CVE-2026-78620
Improper Path Validation in Okta Access Gateway Kerberos Con -
CVE-2026-78579
Improper Input Sanitization in Okta Access Gateway LDAP Data -
CVE-2026-78626
Improper Input Sanitization in Okta Access Gateway Protected
Same vendor: Okta
-
CVE-2026-115547
Command Execution via Admin Console Input in Okta Access Gat -
CVE-2026-78633
Denial of Service in Okta RADIUS Agent Packet Parser -
CVE-2026-78632
Insecure Default File Permissions in Okta RADIUS Agent Windo -
CVE-2026-78628
Improper Input Validation in the Okta Credential Provider fo -
CVE-2026-78622
Improper Link Resolution in Okta Verify for Windows Uninstal
Same weakness: CWE-639
-
CVE-2026-115453
Cross user deletion and modification of cart and wishlist ro -
CVE-2026-115334
Lotus through 0.10.2 Authorization Bypass via switch_organiz -
CVE-2026-115329
Lotus through 0.10.2 Cross-Organization IDOR via Subscriptio -
CVE-2026-115326
QloApps through 1.7.0 IDOR via OrderDetailController Refund -
CVE-2026-115325
Netmaker through 1.7.0 Authorization Bypass via updateExtCli
V. Comments for CVE-2026-115546
No comments yet