OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-12342

CRITICAL · CVSS 9.6 EPSS 0.19% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-28 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

All versions of IdentityIQ are vulnerable to a critical remote code execution flaw that allows unauthenticated users to exploit improper input validation in web service API submissions. This vulnerability poses a significant risk, as it can lead to complete compromise of the IdentityIQ server. Organizations using IdentityIQ should prioritize immediate remediation to mitigate potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-12342
Severity
CRITICAL
CVSS
9.6
EPSS
0.19%

Original NVD Description

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.