CVE-2026-12341: SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability
Published Jul 20, 2026
·Updated
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.
Affected Software
1 affected component
SailPoint IdentityIQ=
Event History
Jul 20, 2026
CVE Published
via MITRE·06:22 PM
Data Sourced
via MITRE·06:22 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-12341?
CVE-2026-12341 has a high severity rating of 8.8.
2
How do I fix CVE-2026-12341?
To address CVE-2026-12341, ensure that you update to the latest patched version of SailPoint IdentityIQ.
3
Who is affected by CVE-2026-12341?
CVE-2026-12341 affects all versions of SailPoint IdentityIQ.
4
What can an attacker do with CVE-2026-12341?
An attacker can gain unauthorized access to protected APIs and sensitive data due to improper validation of OAuth bearer tokens.
5
What types of impact does CVE-2026-12341 have?
CVE-2026-12341 can lead to potential confidentiality, integrity, and availability issues due to unauthorized access.