Okta has released security updates for three high-severity vulnerabilities affecting the Auth0 AD/LDAP Connector and Okta Access Gateway, including a critical stored cross-site scripting flaw that could execute attacker-controlled code in an administrator’s browser. The vulnerabilities, disclosed on September 8, 2026, include stored XSS, authorization bypass, and SQL injection issues. Organizations using the affected identity […]
The post Critical Auth0 AD/LDAP Connector Flaw Lets Attackers Execute Stored XSS in Admin Browsers appeared first on Cyber Security News.