CVE-2026-78622Medium· 6.0▾ SunlitThe Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recurs…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 10.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.10%
0.10% → 0.1%
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115546High· 8.1Authentication Source Verification Issue in Okta Access Gateway
CVE-2026-115547Critical· 9.1Command Execution via Admin Console Input in Okta Access Gateway
CVE-2026-78633Medium· 6.5The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute
CVE-2026-78632Medium· 5.3The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs
CVE-2026-78628Medium· 6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure
CVE-2026-78635Medium· 5.0The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments