Threats tagged 'ghsa-m924-m654-f267'

CVE-2026-12342 is a critical vulnerability in SailPoint Technologies IdentityIQ affecting versions 8.3 through 8.5p2. It allows unauthenticated remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability.