CriticalCritical vulnerability

CVE-2026-12342 (CVSS 9.6)

NVD · officialPublished Sep 28, 2026Risk 50/100

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

Technical details

CVSS

9.6

AV:Adjacent NetworkAC:LowPR:NoneUI:NoneC:HighI:HighA:High

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source