VulnSocial

CVE-2026-85982Patch

LOWCVSS 9.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting (XSS) issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on the host where the connector is installed, could insert script content. This script content could then execute in an administrator's browser when they view the affected search results or update logs.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-18: 1Patch / Workaround · 2026-09-18: 1Technical Details · 2026-09-18: 109-18
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • iototsecnews@iototsecnews
    Patch

    Okta 製品群の脆弱性 CVE-2026-85982／78626／78623 が FIX：XSS／認証バイパス／SQLi の恐れ https://iototsecnews.jp/2026/09/11/okta-patches-auth0-and-access-gateway-vulnerabilities-let-attackers-enable-xss-authentication-bypass-and-sql-injection/ Auth0 AD/LDAP Connector および Okta Access Gateway における脆弱性 CVE-2026-85982／CVE-2026-78626／CVE-2026-78623 は、クロスサイト・スクリプティング／認証バイパス／SQL インジェクションなどを引き起こすものです。管理画面からの不正スクリプトの実行や、認可制御の回避、バックエンド・データベースへの意図しないコマンド実行のおそれがあり、対応策として製品のアップデートの実施／カスタムクエリの監査や属性値の検証が推奨されます。 #CVE202678623 #CVE202678626 #CVE202685982 #Okta #Vulnerability

    Post summary

    Japanese tweet announces three Okta vulnerabilities (XSS, auth bypass, SQLi) in Auth0 and Access Gateway, emphasizing product updates and query/attribute validation as recommended countermeasures.

    00000100
    515 followersView on X

Explore more

Back to dashboard