CRITICAL 9.6 NVD

CVE-2026-12342

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input va

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

References

https://www.sailpoint.com/security-advisories/

Published: 2026-09-28 · Source: NVD · Feed updated: 2026-09-28

This critical severity vulnerability with a CVSS score of 9.6 was published on 2026-09-28 via NVD.

Risk Timeline

CVE Disclosed2026-09-28 · -1 days ago

Remediation Resources

Official Advisory

www.sailpoint.com/security-advisories/

vulnfeed aggregates 13625 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.