Okta

Global cloud / infrastructure

Aliases / services: Okta / Auth0 / Okta Access Gateway / okta.com
Official website: https://www.okta.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Listed services and systems

Response status: Cloud unaffected; Access Gateway fixed release available
Response information checked: 2026-10-27 Rechecked: 2026-10-27

Identity and access management.

Okta and Auth0 cloud platforms are unaffected. Okta Access Gateway requires a patch; the official response directs customers to fixed version 2026.44.0.

What users should do

Upgrade Access Gateway versions earlier than 2026.44.0 to 2026.44.0. SDK users should follow the linked PHP developer KB guidance. Okta/Auth0 cloud users need no action.

Official service URL

https://www.okta.com/

Source URLs

PHP2Shell response and scopehttps://sec.okta.com/articles/2026/10/okta-response-to-php2shell/Response evidence

Related official sources

PHP2Shell response and scopeOfficial notice