Access Gateway
24 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Access Gateway, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Access Gateway CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 9 |
Severity
How the 24 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical5
- High3
- Medium16
Latest CVEs
The 15 most recently published vulnerabilities affecting Access Gateway.
- CVE-2026-78630Improper Input Neutralization in Okta Access Gateway SNMP Configuration Processing6.7
- CVE-2026-78620Improper Path Validation in Okta Access Gateway Kerberos Configuration Handling5.9
- CVE-2026-78579Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation6.8
- CVE-2026-78626Improper Input Sanitization in Okta Access Gateway Protected Rules8.1
- CVE-2026-78625Insufficient Validation of Dashboard Application Labels in Okta Access Gateway Dashboard Site Configuration6.7
- CVE-2026-78624Improper Path Validation in Okta Access Gateway Backup and Restore Functionality4.9
- CVE-2026-78560Improper Authentication Validation in Okta Access Gateway Pass-Through Authentication Source4.8
- CVE-2026-78552Validation Bypass in Okta Access Gateway Custom Directives6.0
- CVE-2026-78623Improper Handling of SAML Assertion Attributes in Okta Access Gateway Advanced Mode Datastores7.7
- CVE-2021-28113A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute...6.7
- CVE-2013-2263Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors.5.0
- CVE-2011-2883The NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 attempts to validate signed DLLs by ...9.3
- CVE-2011-2882Stack-based buffer overflow in the NSEPA.NsepaCtrl.1 ActiveX control in nsepa.ocx in Citrix Access Gateway Enterprise Edition 8.1 before 8.1-67.7, 9.0 before 9.0-70.5, and 9.1 before 9.1-96.4 allow...9.3
- CVE-2010-4566The web authentication form in the NT4 authentication component in Citrix Access Gateway Enterprise Edition 9.2-49.8 and earlier, and the NTLM authentication component in Access Gateway Standard an...9.3
- CVE-2008-2528Unspecified vulnerability in Citrix Access Gateway Standard Edition 4.5.7 and earlier and Advanced Edition 4.5 HF2 and earlier allows attackers to bypass authentication and gain "access to network ...10.0
Product grouping is registry-driven, with AI assist and human review. How it works