Vulnerabilities
Summary — last 7 days
New vulnerabilities3,462▼ 1,344 vs. last week
Critical / high1,322▼ 1,439 vs. last week
New active exploitation (KEV)13▲ 6 vs. last week
Unscored (no CVSS)696▲ 636 vs. last week
More filters
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (6.5) | 0.21% | — | Okta Radius AgentAI | 10/13/2026 | 10/16/2026 | The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests. | |
| Awaiting Analysis | Medium (5.3) | 0.07% | — | Okta Radius AgentAI | 10/13/2026 | 10/15/2026 | The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent configuration, AES encryption key, and logs. These permissions allow any local service account on the host to read the AES encryption key and… |