CVEPublished 2026-09-08Modified 2026-09-100 articles on news4 live referencesNVD data

CVE-2026-78579

Vulnerability data via NVD (ingested)

CVSS v3.1
6.8
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS percentile
Description

The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of the intended query logic.

Timeline
Published 2026-09-08
Modified 2026-09-10

External references

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

More intel sources (5)

Known PoCs on GitHub

No public proof-of-concept repositories found for CVE-2026-78579 on GitHub.
We haven't classified any articles referencing CVE-2026-78579 yet. The external references above still apply.