SailPoint Technologies CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH SailPoint Technologies CVE published 2026-07-20

CVE-2026-12341

This PatchSiren debrief is based on the supplied CVE record and source corpus. The CVE record was published on 2026-07-20T19:17:18.027Z and has not been modified since then. The vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens. Defenders responsible for IdentityIQ deploym [truncated]