PT-2026-35962 · Sailpoint Technologies · Identityiq

Wildwildwes · Published 2026-04-29 · Updated 2026-04-29 · CVE-2026-5712

Mitre

CVSS v3.1

8.0

High

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-5712

Affected Products

Identityiq

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-5712 · Security Note
• https://sailpoint.com/security-advisories/sailpoint-identityiq-role-editor-incorrect-authorization-vulnerability-cve-2026-5712 · Note