VULNERABILITY INTELLIGENCE

CVE-2026-77585

CVSS score5.3 MEDIUM

EPSS probability0.14%

CISA KEVNot currently listed

Published2026-08-25

Last modified2026-08-28

Description

The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.