{"metadata": {"vulnerability": "CVE-2026-115547", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-22T20:55:23.012Z", "date_only": false, "value": "2026-10-22T20:55:23.012Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-115547", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-23T03:06:45.274Z", "date_only": false, "value": "2026-10-23T03:06:45.274Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-115547", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-23T03:09:32.051Z", "date_only": false, "value": "2026-10-23T03:09:32.051Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Okta", "record": "CVE-2026-115547", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T03:23:09.103Z", "date_only": false, "value": "2026-10-23T03:23:09.103676Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117488077281675386", "record": "cve-2026-115547", "field": "creation_timestamp", "uuid": "707d66ab-0a75-4104-b7cc-a6e8b4c35449", "content": "CVE-2026-115547 Command Execution via Admin Console Input in Okta Access Gateway An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can leverage this to execute system commands within the context of the OAG service account.\nhttps://www.cve.org/CVERecord?id=CVE-2026-115547http://trust.okta.com/security-advisories/command-execution-via-admin-console-input-in-okta-access-gateway-cve-2026-115547#okta #Okta #OktaAccessGateway#CVE_2026_115547#bot", "url": "https://infosec.exchange/users/cve/statuses/117488077281675386"}, {"timestamp": "2026-10-23T04:18:16Z", "date_only": false, "value": "2026-10-23T04:18:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F8GP-F8Q2-388V", "record": "GHSA-F8GP-F8Q2-388V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-23T04:18:16.030Z", "date_only": false, "value": "2026-10-23T04:18:16.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115547", "record": "FKIE_CVE-2026-115547", "field": "published"}, {"timestamp": "2026-10-23T06:00:24.467Z", "date_only": false, "value": "2026-10-23T06:00:24.467198Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117488695624483082", "record": "cve-2026-115547", "field": "creation_timestamp", "uuid": "2c86b84b-896b-4ca3-8248-a2b408b85c14", "content": "CVE-2026-115547 | Okta Access Gateway CRITICAL vuln (CVSS 9.1): Authenticated admin can execute arbitrary commands as OAG service account in versions <2026.10.2. Patch to 2026.10.2+ ASAP. https://radar.offseq.com/threat/cve-2026-115547-improper-control-of-generation-of-code-in-okta-okta-access-gateway-918199f1f327eefb #OffSeq #Okta #Vuln #InfoSec", "url": "https://infosec.exchange/users/offseq/statuses/117488695624483082"}, {"timestamp": "2026-10-23T06:31:26Z", "date_only": false, "value": "2026-10-23T06:31:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F8GP-F8Q2-388V", "record": "GHSA-F8GP-F8Q2-388V", "field": "published"}, {"timestamp": "2026-10-23T06:31:26Z", "date_only": false, "value": "2026-10-23T06:31:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F8GP-F8Q2-388V", "record": "GHSA-F8GP-F8Q2-388V", "field": "modified"}, {"timestamp": "2026-10-23T10:46:08.519Z", "date_only": false, "value": "2026-10-23T10:46:08.519933Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-115547", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-23T10:46:08.519Z", "date_only": false, "value": "2026-10-23T10:46:08.519933Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115547", "record": "FKIE_CVE-2026-115547", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-23T10:56:08.187Z", "date_only": false, "value": "2026-10-23T10:56:08.187Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-115547", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-23T10:56:08.187Z", "date_only": false, "value": "2026-10-23T10:56:08.187Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-115547", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-23T13:03:25.900Z", "date_only": false, "value": "2026-10-23T13:03:25.900972Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/117490359040352311", "record": "cve-2026-115547", "field": "creation_timestamp", "uuid": "807f286e-ad6a-43f0-a8f7-fba949e5e35f", "content": "Command Execution via Admin Console Input in Okta Access Gateway CVE-2026-115547 - Oct 22, 2026#Okta #CVE_2026_115547 https://trust.okta.com/security-advisories/command-execution-via-admin-console-input-in-okta-access-gateway-cve-2026-115547/", "url": "https://infosec.exchange/users/threatcodex/statuses/117490359040352311"}, {"timestamp": "2026-10-23T16:16:42.088Z", "date_only": false, "value": "2026-10-23T16:16:42.088046Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117491118967765456", "record": "cve-2026-115547", "field": "creation_timestamp", "uuid": "f15e8c40-6ffc-4ff6-b002-ab320f4b92ca", "content": "\ud83d\udea8 Critical Okta Access Gateway flaw allows administrators to execute system commands; CVE-2026-115547\nThe vulnerability affects the Okta Access Gateway Admin Console and carries a CVSS score of 9.1.\u2800An authenticated administrator can submit specially formatted configuration values to execute commands within the context of the OAG service account.\nKey details:\n\u2022 Network exploitable\u2022 Low attack complexity\u2022 Administrative access required\u2022 No user interaction required\u2022 Affects OAG versions before 2026.10.2\u2800Okta has resolved the vulnerability in Access Gateway 2026.10.2. Administrators should manually upgrade affected appliances.\nSource:https://trust.okta.com/security-advisories/command-execution-via-admin-console-input-in-okta-access-gateway-cve-2026-115547", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/117491118967765456"}, {"timestamp": "2026-10-23T16:44:17.950Z", "date_only": false, "value": "2026-10-23T16:44:17.950", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-115547", "record": "FKIE_CVE-2026-115547", "field": "lastModified"}]}