Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-78635

Improper Input Validation in the Okta Privileged Access SSH Client URL Handler Argument

The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag, causing unintended modification of the SSH client's behavior.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Okta
Products
Okta Privileged Access Client
CVE-2026-77585

Improper Validation of SSH Target in Okta Privileged Access Client

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Okta
Products
Okta Privileged Access Client