// OktaHIGH
Okta fixed CVE-2026-115547, a code injection vulnerability in Okta Access Gateway Admin Console with CVSS score 9.1. The flaw allows authenticated administrators to execute system commands within the OAG service context. No public exploitation recorded as of disclosure. Affected customers must upgrade to version 2026.10.2 or greater; no workaround available.
- Okta Fixes CVE-2026-115547 in Access Gateway(opens in a new tab)
- Okta Access Gateway Vulnerabilities Include PHP2Shell(opens in a new tab)
- Critical Okta Access Gateway Vulnerability Allows Remote Command(opens in a new tab)
- Critical Okta Access Gateway Vulnerability Enables Remote Comman(opens in a new tab)
- Critical Command Execution Vulnerability in Okta Access Gateway (opens in a new tab)
// Get alerts for Okta