<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 02 Oct 2026 04:22:56 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-78545 — Improper Input Sanitization in Okta Access Gateway Application Label Configuration</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-78545</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Okta Access Gateway&lt;/p&gt;
&lt;p&gt;The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an nginx server block directive, resulting in execution of injected directives.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Okta Access Gateway&lt;/p&gt;
&lt;p&gt;The Okta Access Gateway does not sanitize the application label field before including it in the generated nginx configuration file. The unsanitized value is interpolated into an nginx server block directive, resulting in execution of injected directives.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-78545</guid>
    </item>
  </channel>
</rss>
