VYPR
← All advisories
High severity8.0NVD Advisory· Published Apr 29, 2026· Updated May 5, 2026

CVE-2026-5712

CVE-2026-5712

Description

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Affected products

10
  • Sailpoint/Identityiq10 versions
    cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*range: <8.3
    • cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:patch4:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.4:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.4:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.5:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.5:patch1:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

1