CVE-2026-12341CWE-287

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

High · published July 20, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

This vulnerability

impacts all versions of IdentityIQ and allows an unauthenticated attacker

unauthorized access to protected APIs and data due to improper validation of

OAuth bearer tokens.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.7th percentile
Weakness
CWE-287 · Improper Authentication
Published
2026-07-20T18:22Z
EPSS history
Timeline
  • 20 JUL 18:22Z
    SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability
    cvelistv5