CVE-2026-85983

The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the service account.

• CWE-94

• https://trust.okta.com/security-advisories/local-privilege-escalation-in-auth0-ad-ldap-connector-cve-2026-85983

Published

Sep 8, 2026

Last Modified

Sep 10, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-85977A flaw was found in libtirpc. A remote attacker can exploit …5.3
• CVE-2026-85978An unauthenticated remote code execution vulnerability exist…9.8
• CVE-2026-85979Affected versions of Puppet Enterprise contain a command inj…8.6
• CVE-2026-8598An undocumented configuration export port is accessible on s…9.1
• CVE-2026-85981The administrative panel of the Auth0 AD/LDAP Connector (ver…6.7
• CVE-2026-85982The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Si…9
• CVE-2026-85984The miniOrange OTP Login, Verification and SMS Notifications…9.8
• CVE-2026-85985MariaDB server is a community developed fork of MySQL server…5.4
• CVE-2026-8599The MailerPress – Email Marketing, Newsletter, Email Automat…6.4
• CVE-2026-85990Leantime is an open source project management system. Prior …8.8
• CVE-2026-85995Notepad++ is a free and open-source source code editor. From…7.3
• CVE-2026-85999Soup Sieve is a CSS selector library designed to be used wit…5.3