[ Vendor · 3 CVEs ]
Okta
CVEs affecting Okta published in the last 30 days, plus any Okta CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-78628 | 13 Oct 2026 | CVSS 6.0 | Okta Credential Provider for WindowsThe Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The… | |
| CVE-2026-78632 | 13 Oct 2026 | CVSS 5.3 | Okta RADIUS AgentThe Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the… | |
| CVE-2026-78633 | 13 Oct 2026 | CVSS 6.5 | Okta RADIUS AgentThe Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the… |