Okta

Okta: status page changed

Okta updated the system status page to reference a new incident record (ID: a9CWR0000002Mak2AE), replacing the previous incident reference.

Okta: status page changed

Okta updated their system status page to reference a new incident record (ID: a9CWR0000002Kyk2AE), replacing the previous incident reference.

Okta: status page changed

Okta updated their system status page to reference a new incident record (ID: a9CWR0000002Iti2AE), replacing the previous incident reference (ID: a9CWR0000002Hcg2AE).

Okta: status page changed

Okta updated the system status page to reference a new incident record (ID: a9CWR0000002IYk2AM), replacing the previous incident reference.

Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal CVE-2026-78622 - Sep 8, 2026

Okta released a security advisory for CVE-2026-78622 regarding an improper link resolution vulnerability in the Okta Verify for Windows uninstaller. Users are advised to upgrade to version 7.0.0 or greater to remediate the issue.

Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling CVE-2026-78574 - Sep 8, 2026

Okta released a security advisory for CVE-2026-78574 regarding an improper assembly resolution vulnerability in the Okta Hyperdrive Integration plugin. Users are advised to upgrade to version 1.5.2 or greater to remediate the issue.

Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management CVE-2026-84685 - Sep 8, 2026

Okta released a security advisory for CVE-2026-84685 regarding the react-native-auth0 SDK. The vulnerability involves improper cache isolation in server-side rendering environments, affecting versions 5.0.0 through 5.11.0.

Unauthenticated Localhost Admin Panel in Auth0 AD/LDAP Connector CVE-2026-85981 - Sep 8, 2026

Okta released a security advisory for CVE-2026-85981 regarding an unauthenticated admin panel in Auth0 AD/LDAP Connector versions 6.5.0 and earlier. Users are advised to upgrade to version 6.6.0 or greater to remediate the vulnerability.

Stored Cross-Site Scripting (XSS) in Auth0 AD/LDAP Connector CVE-2026-85982 - Sep 8, 2026

Okta released a security advisory for a stored XSS vulnerability (CVE-2026-85982) in the Auth0 AD/LDAP Connector. Users are advised to upgrade the auth0/ad-ldap-connector to version 7.0.0 or greater to remediate the issue.

Local Privilege Escalation in Auth0 AD/LDAP Connector CVE-2026-85983 - Sep 8, 2026

Okta released a security advisory for a local privilege escalation vulnerability (CVE-2026-85983) in the Auth0 AD/LDAP Connector. Users are advised to upgrade the connector to version 7.00 or greater to remediate the issue.