CVE-2026-12342
CRITICAL
CVSS 9.6
Published: 2026-09-28
Modified: 2026-09-29
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.
Quick Facts
| CVE ID | CVE-2026-12342 |
| CVSS Score | 9.6 |
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Published | 2026-09-28 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |