CVE-2026-12342

critical · 9.6

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

9.6

CVSS

—

EPSS (exploit prob.)

—

EPSS percentile

2026-09-28

Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-20

References

https://www.sailpoint.com/security-advisories/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-12342