// Auth0HIGH
Okta has patched three high-severity vulnerabilities in Auth0 AD/LDAP Connector and Okta Access Gateway. CVE-2026-85982, a stored cross-site scripting (XSS) flaw in the Auth0 connector (CVSS 9.0), allows authenticated attackers to inject malicious scripts executed when administrators view search results or logs. CVE-2026-78626 (CVSS 8.1) permits authorization bypass in Protected Rules, and CVE-2026-78623 (CVSS 7.7) is an SQL injection vulnerability in Access Gateway's advanced-mode datastore. Organizations using these components should upgrade immediately.
// Get alerts for Auth0