CVE-2026-12342 — SailPoint IdentityIQ Improper Form Validation Vulnerability

CVE-2026-12342

SailPoint IdentityIQ Improper Form Validation Vulnerability PUBLISHED

Description (CNA)

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

Affected (CNA)

Vendor / product	Versions
SailPoint Technologies / IdentityIQ	affected 8.5 through 8.5p2; affected 8.4 through 8.4p4; affected 8.3 through 8.3p5

CWE

CWE-20

References

https://www.sailpoint.com/security-advisories/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.