{"schema_version":1,"title":"SailPoint IdentityIQ vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in SailPoint IdentityIQ: 0 in the last 7 days and 1 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-12342, was published on 28 September 2026. Nothing in the last four weeks, down from 1 vulnerability in the four before. 0 critical against 1.","url":"https://junglewise.ai/threats/technologies/identityiq","json_url":"https://junglewise.ai/threats/technologies/identityiq.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/identityiq","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":3,"all_time":4,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":3},"latest":[{"cve":"CVE-2026-12342","cvss":9.6,"slug":"cve-2026-12342-this-vulnerability-impacts-all-versions-of-identityiq-and-allows","title":"SailPoint IdentityIQ remote code execution in web service API","severity":"critical","exploited":false,"published_at":"2026-09-28T16:17:13.46+00:00","url":"https://junglewise.ai/threats/cve-2026-12342-this-vulnerability-impacts-all-versions-of-identityiq-and-allows"},{"cve":"CVE-2026-12341","cvss":8.8,"slug":"cve-2026-12341-sailpoint-identityiq-improper-authentication-in-oauth-token","title":"SailPoint IdentityIQ improper authentication in OAuth token validation","severity":"high","exploited":false,"published_at":"2026-07-20T19:17:18.027+00:00","url":"https://junglewise.ai/threats/cve-2026-12341-sailpoint-identityiq-improper-authentication-in-oauth-token"},{"cve":"CVE-2026-5712","cvss":8,"epss":0.0016,"slug":"cve-2026-5712-this-vulnerability-impacts-all-versions-of-identityiq-and-allows","title":"This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or…","severity":"high","exploited":false,"published_at":"2026-04-29T18:16:05.18+00:00","url":"https://junglewise.ai/threats/cve-2026-5712-this-vulnerability-impacts-all-versions-of-identityiq-and-allows"},{"cve":"CVE-2025-10280","cvss":7.1,"epss":0.0022,"slug":"cve-2025-10280-identityiq-8-5-identityiq-8-4-and-all-8-4-patch-levels-prior-to-8","title":"IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels…","severity":"high","exploited":false,"published_at":"2025-11-03T17:15:32.527+00:00","url":"https://junglewise.ai/threats/cve-2025-10280-identityiq-8-5-identityiq-8-4-and-all-8-4-patch-levels-prior-to-8"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"SailPoint IdentityIQ","slug":"identityiq","vendor":{"hub":true,"name":"SailPoint","slug":"sailpoint","url":"https://junglewise.ai/threats/vendors/sailpoint"},"aliases":[],"category":"identity-management","homepage":"https://www.sailpoint.com/products/identityiq/","description":"SailPoint IdentityIQ is identity governance and access management software.","url":"https://junglewise.ai/threats/technologies/identityiq"},"most_severe":[{"cve":"CVE-2026-12342","cvss":9.6,"slug":"cve-2026-12342-this-vulnerability-impacts-all-versions-of-identityiq-and-allows","title":"SailPoint IdentityIQ remote code execution in web service API","severity":"critical","exploited":false,"published_at":"2026-09-28T16:17:13.46+00:00","url":"https://junglewise.ai/threats/cve-2026-12342-this-vulnerability-impacts-all-versions-of-identityiq-and-allows"},{"cve":"CVE-2026-12341","cvss":8.8,"slug":"cve-2026-12341-sailpoint-identityiq-improper-authentication-in-oauth-token","title":"SailPoint IdentityIQ improper authentication in OAuth token validation","severity":"high","exploited":false,"published_at":"2026-07-20T19:17:18.027+00:00","url":"https://junglewise.ai/threats/cve-2026-12341-sailpoint-identityiq-improper-authentication-in-oauth-token"},{"cve":"CVE-2026-5712","cvss":8,"epss":0.0016,"slug":"cve-2026-5712-this-vulnerability-impacts-all-versions-of-identityiq-and-allows","title":"This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or…","severity":"high","exploited":false,"published_at":"2026-04-29T18:16:05.18+00:00","url":"https://junglewise.ai/threats/cve-2026-5712-this-vulnerability-impacts-all-versions-of-identityiq-and-allows"},{"cve":"CVE-2025-10280","cvss":7.1,"epss":0.0022,"slug":"cve-2025-10280-identityiq-8-5-identityiq-8-4-and-all-8-4-patch-levels-prior-to-8","title":"IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels…","severity":"high","exploited":false,"published_at":"2025-11-03T17:15:32.527+00:00","url":"https://junglewise.ai/threats/cve-2025-10280-identityiq-8-5-identityiq-8-4-and-all-8-4-patch-levels-prior-to-8"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}