CVE-2026-78574

Katalog CVE

CVSS 6.3 · Medium EPSS 0,10%

Kerentanan Untrusted Search Path pada okta hyperdrive. Skor CVSS 3.1 6.3 (Medium) menurut NVD.

Deskripsi (NVD)

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.

Rincian

Terbit di NVD

8 September 2026

Terakhir diubah

23 September 2026

Status NVD

Analyzed

CVSS 3.1

6.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-426: Untrusted Search Path

EPSS (30 hari)

0,10% peluang dieksploitasi; lebih tinggi dari 0,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://trust.okta.com/security-advisories/improper-assembly-resolution-in-okta-hyperdrive-integration-plugin-... advisory vendor