CVSS 9.6 (critical) ยท published 2026-09-28
This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.
Weakness: CWE-20
Source: NVD CVE-2026-12342
Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.