[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLzC5d_C8_DyUH9yzLS4o72OrkMe2fmFGKdvH5uR-H3A":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":141},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"40013685-01fd-4f23-b2f0-73363ff72e4e","Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands","critical-okta-access-gateway-flaw-lets-attackers-with-admin-access-execute-syste-2eba80","Okta has disclosed a critical security flaw in Okta Access Gateway that lets an authenticated administrator run system commands through the appliance’s Admin Console. Tracked as CVE-2026-115547, the vulnerability affects versions before 2026.10.2 and has a CVSS v3.1 score of 9.1, according to the October 22, 2026 advisory. The issue involves weak input validation when […] The post Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands appeared first on Cyber Security News.","Okta has disclosed a critical vulnerability (CVE-2026-115547) in Okta Access Gateway versions prior to 2026.10.2. The flaw allows an authenticated administrator to execute system commands through the Admin Console due to weak input validation. Successful exploitation grants the attacker the permissions of the OAG service account, with potential impacts on confidentiality, integrity, and availability.","Okta Access Gateway critical flaw allows admin command execution.","https:\u002F\u002Fcybersecuritynews.com\u002Fokta-access-gateway-flaw\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FCritical-Okta-Access-Gateway-Flaw-Lets-Attackers-With-Admin-Access-Execute-System-Commands.webp","2026-10-23T15:19:23+00:00","2026-10-23T16:00:09.087175+00:00",8,[17,20],{"name":18,"type":19},"Okta Access Gateway","product",{"name":21,"type":22},"Okta","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,34,36],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2c8f44d4-b56e-47cf-9677-04f22c9ee78d","Identity & Access","identity-access",{"category":35},{"id":23,"icon":25,"name":26,"slug":27},{"category":37},{"id":38,"icon":25,"name":39,"slug":40},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-115547","Critical vulnerability in Okta Access Gateway",[21,18],{"controls":48,"vendors":134},[49,77,105],{"slug":50,"name":51,"problem":52,"products":53},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[54,62,70],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":50,"product_name":74,"url":75,"description":76},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":78,"name":79,"problem":80,"products":81},"patch-management","Automated patch management","Known holes get closed in days, not months.",[82,89,97],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":78,"product_name":86,"url":87,"description":88},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":106,"name":107,"problem":108,"products":109},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[135],{"slug":136,"name":21,"logo_path":137,"roles":138},"okta","\u002Fvendor-logos\u002Fokta.png",[139,140],"affected","reported_by",{"slug":142,"title":143,"body":144,"framework_refs":145,"framework_notes":153},"critical-okta-access-gateway-flaw-enables-admin-command-execution","Critical Okta Access Gateway Flaw Enables Admin Command Execution","A critical vulnerability in Okta Access Gateway (CVE-2026-115547) allowed authenticated administrators to execute arbitrary system commands through the Admin Console due to insufficient input validation. While requiring administrative credentials reduces the attack surface, compromised or malicious admin accounts could leverage this flaw to fully escalate privileges to the OAG service account level, threatening confidentiality, integrity, and availability. This highlights the danger of assuming that authenticated users — even administrators — can be fully trusted when input handling is weak. Organizations relying on Okta Access Gateway as a critical identity perimeter component face significant risk until patched, as this component sits at the heart of access control decisions.",[146,147,148,149,150,151,152],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","OWASP A06:2021 Vulnerable and Outdated Components","PCI DSS Requirement 6","NIS2 Article 21(2)(b)",{"NIS2 Article 21(2)(b)":154,"PCI DSS Requirement 6":155,"NIST SP 800-53 SI-2: Flaw Remediation":156,"OWASP A06:2021 Vulnerable and Outdated Components":157,"CIS Control 7: Continuous Vulnerability Management":158,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":159,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":160},"NIS2 requires essential and important entities to implement incident handling and vulnerability management practices; this would have obligated organizations to prioritize patching of critical identity infrastructure like Okta Access Gateway.","PCI DSS Requirement 6 mandates developing and maintaining secure systems by applying security patches promptly, which would have required organizations to update Okta Access Gateway before this critical flaw could be weaponized.","SI-2 requires organizations to identify, report, and remediate software flaws within defined timeframes; adherence would have mandated emergency patching of this critical input-validation vulnerability in a gateway component.","The vulnerability stems directly from running an unpatched, outdated version of Okta Access Gateway; OWASP A06 specifically addresses the risk of failing to update components with known vulnerabilities.","Regular vulnerability scanning and a structured patching cadence would have flagged CVE-2026-115547 quickly and enforced timely remediation of the critical Okta Access Gateway flaw before exploitation.","This control requires timely identification and remediation of technical vulnerabilities; applying it would have ensured Okta Access Gateway was patched before attackers could exploit the command injection flaw.","Enforcing strict access control and least-privilege for administrative roles in gateway systems would have limited the blast radius of this vulnerability by preventing admin accounts from escalating to OAG service account permissions."]