SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-78574

HIGH · CVSS 7.5 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-09-08 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

The Okta Hyperdrive Integration plugin is vulnerable due to its reliance on a registry path within the current user's hive for assembly resolution, lacking integrity verification. This flaw allows unverified assemblies to execute within the host process or elevated installer context, potentially leading to arbitrary code execution. Organizations utilizing this plugin should prioritize remediation to mitigate the risk of exploitation.

CVE
CVE-2026-78574
Severity
HIGH
CVSS
7.5
EPSS
0.10%

Original NVD Description

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.