Detected Sep 8, 2026, 9:00 PM
Significance
HighChange Type
Security Update
AI Confidence
100%
Okta released a security advisory for a stored XSS vulnerability (CVE-2026-85982) in the Auth0 AD/LDAP Connector. Users are advised to upgrade the auth0/ad-ldap-connector to version 7.0.0 or greater to remediate the issue.
The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. To remediate, upgrade the auth0/ad-ldap-connector to version 7.0.0 or greater.