CVE-2026-5712

CVSS Score & Metrics

Base Score

8.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H                                    

Vulnerability Description

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Vulnerability Details

Published Date

April 29, 2026

Last Modified

April 29, 2026

CWE ID

CWE-863

Source

NVD

External References

https://www.sailpoint.com/security-advisories/sailpoint-identityiq-role-editor-incorrect-authorization-vulnerability-cve-2026-5712

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment