SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityAwaiting Analysis

CVE-2026-85983

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup.

HIGH 7.8EPSS 0.14%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.

CVSS 3.1
7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.14% probability · 3th percentile
CISA KEV
Not listed
Weakness
CWE-94
Source
psirt@okta.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.