CVE-2026-78635
Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument
CVSS score
5.0
EPSS probability
%0.2
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.7
CVE-2026-78623
Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores
O
Patch status unknownEPSS %0
8.1
CVE-2026-78626
Improper Input Sanitization in Okta Access Gateway Protected Rules
O
Patch status unknownEPSS %0
6.6
CVE-2026-78550
Improper Input Handling in Okta Access Gateway Management Console Exception Handler
O
Patch status unknownEPSS %0
6.6
CVE-2026-78545
Improper Input Sanitization in Okta Access Gateway Application Label Configuration
O
Patch status unknownEPSS %0
4.9
CVE-2026-78624
Improper Path Validation in Okta Access Gateway Backup and Restore Functionality
O
Patch status unknownEPSS %0
5.9
CVE-2026-78620
Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling
O
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-78635"