CVE-2026-78626

Okta Access Gateway is vulnerable to an authorization bypass in its Protected Rule authorization check. The root cause is improper input sanitization and regular expression evaluation within that check, allowing a bypass when an administrator has explicitly configured a Protected Rule policy on o...