CVE WatchSep 23, 2026

CVE-2026-78574

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity v

CVSS

7.5

High

EPSS

0.1%

KEV

—

Exploit Today

0-100

Published: Sep 8, 2026 · Last modified: Sep 23, 2026 · CWE-426

EPSS · 30d

0.1%EPSS · 30 days0.1%

2026-09-272026-10-25

Technical description

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.

Official references

trust.okta.comhttps://trust.okta.com/security-advisories/improper-assembly-resolution-in-okta-hyperdrive-integration-plugin-registry-handling-cve-2026-78574

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-113461—

1.8%

——1Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the 'oratab' file itself to execute code as root if an agent has the 'mk-oracle' plugin enabled.3d CVE-2026-9518210.0 CRI

44.7%

——13An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitimate content.10d CVE-2026-0315—

1.1%

——0A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.11d CVE-2026-1038478.6 HIG

8.3%

——2Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must run the application. Scope is changed.12d CVE-2026-835097.0 HIG

26.6%

——8Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.10d CVE-2026-835067.8 HIG

35.4%

——11Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.10d