CVE-2026-12342 – SailPoint IdentityIQ
CVSS 9.6
CRITICAL
[2] Critical – Same Day Deployment
“When the identity platform is the entry point, every account it governs is exposed.”
This IdentityIQ update fixes a critical flaw that affects all versions of the product. CVE-2026-12342 has a CVSS score of 9.6, Critical severity. The server does not properly validate content submitted to its web service API. As a result, an unauthenticated attacker can run code remotely on the IdentityIQ server.
IdentityIQ controls user identities and access across the enterprise, so a compromised server puts the whole access-governance layer at risk. Apply this update the same day to close the exposure.
Key Details
- Attack Vector
- Adjacent
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- CWE Classification
- CWE-20
Patch this CVE on all your endpoints in under 5 minutes.
First 200 endpoints are free forever, scale as needed.