CVE-2026-48612 – Okta OAuth Account Linking Vulnerability

CVE ID :CVE-2026-48612

Published : June 12, 2026, 4:17 a.m. | 1 hour, 4 minutes ago

Description :Improper state verification in the OAuth implementation could allow an attacker to manipulate the authentication flow and cause a victim’s account to be linked to an attacker-controlled account. This can result in unauthorized account linking and potential account takeover.

Severity: 8.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…