CVE-2026-78623— Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
Quick assessment
Affected
Okta Okta Access Gateway
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
这段文本描述的是一项关于 SQL 注入的安全漏洞。以下是几种不同风格的翻译，您可以根据使用场景（如技术报告、新闻简报或口语化解释）选择最合适的一版。 1. 专业技术翻译（推荐用于安全公告或技术文档） > Okta 访问网关在高级模式数据存储配置中，未能对 SAML 断言值进行清洗，而是直接将其嵌入到数据库查询中。由于这些未经清洗的值在查询字符串预处理之前就被直接替换进查询语句，导致在配置的后端数据库中发生了非预期的 SQL 执行。 2. 简洁精炼版（适合快速浏览或标题摘要） > Okta 访问网关未对 SAML 断
Possible ATT&CK Techniques 2 AI
T1210 · Exploitation of Remote Services T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78623
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
Source: CVE Program / CVE List V5
Vulnerability Description
The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datastore configuration. The unsanitized values are substituted directly into the query string prior to preparation, resulting in unintended SQL execution against the configured backend database.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Okta | Okta Access Gateway | 0 ~ 2026.9.1 | - |
|
II. Public POCs for CVE-2026-78623
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78623
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-78623 (1)
Same Patch Batch · Okta · 2026-09-08 · 17 CVEs total
| CVE-2026-78626 | 8.1 HIGH | Improper Input Sanitization in Okta Access Gateway Protected Rules |
| CVE-2026-78574 | 7.5 HIGH | Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling |
| CVE-2026-78627 | 7.3 HIGH | Improper Credential Protection in Okta Hyperdrive Integration Installer Logging |
| CVE-2026-78579 | 6.8 MEDIUM | Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation |
| CVE-2026-78625 | 6.7 MEDIUM | Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard S |
| CVE-2026-78630 | 6.7 MEDIUM | Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing |
| CVE-2026-78550 | 6.6 MEDIUM | Improper Input Handling in Okta Access Gateway Management Console Exception Handler |
| CVE-2026-78545 | 6.6 MEDIUM | Improper Input Sanitization in Okta Access Gateway Application Label Configuration |
| CVE-2026-78552 | 6.0 MEDIUM | Validation Bypass in Okta Access Gateway Custom Directives |
| CVE-2026-78622 | 6.0 MEDIUM | Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal |
| CVE-2026-78620 | 5.9 MEDIUM | Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling |
| CVE-2026-78629 | 5.6 MEDIUM | Improper Authentication Verification in the Okta Hyperdrive Agent MFA Response Handling |
| CVE-2026-78631 | 5.3 MEDIUM | Improper Restriction of Sensitive Information in Okta Hyperdrive Agent Logging |
| CVE-2026-78635 | 5.0 MEDIUM | Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument |
| CVE-2026-78624 | 4.9 MEDIUM | Improper Path Validation in Okta Access Gateway Backup and Restore Functionality |
| CVE-2026-78560 | 4.8 MEDIUM | Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Sour |
IV. Related Vulnerabilities
Same product: Okta Access Gateway
-
CVE-2026-78630
Improper Input Neutralization in Okta Access Gateway SNMP Co -
CVE-2026-78620
Improper Path Validation in Okta Access Gateway Kerberos Con -
CVE-2026-78579
Improper Input Sanitization in Okta Access Gateway LDAP Data -
CVE-2026-78626
Improper Input Sanitization in Okta Access Gateway Protected -
CVE-2026-78625
Insufficient Validation of Dashboard Application Labels in O
Same vendor: Okta
-
CVE-2026-78622
Improper Link Resolution in Okta Verify for Windows Uninstal -
CVE-2026-78631
Improper Restriction of Sensitive Information in Okta Hyperd -
CVE-2026-78630
Improper Input Neutralization in Okta Access Gateway SNMP Co -
CVE-2026-78629
Improper Authentication Verification in the Okta Hyperdrive -
CVE-2026-78635
Improper Input Validation in the Okta Privileged Access SSH
Same weakness: CWE-89
-
CVE-2026-87034
Tanium addressed a SQL injection vulnerability in Comply. -
CVE-2026-75746
ColdFusion | Improper Neutralization of Special Elements use -
CVE-2026-86675
itsourcecode Sales and Inventory System us_edit.php sql inje -
CVE-2026-66819
Microsoft SQL Server Elevation of Privilege Vulnerability -
CVE-2026-69636
Microsoft Office SharePoint Information Disclosure Vulnerabi
V. Comments for CVE-2026-78623
No comments yet