What is GHSA-m924-m654-f267?

GHSA-m924-m654-f267 is a security advisory published by GitHub Security Advisories with Critical severity. This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote...

Which CVE IDs does GHSA-m924-m654-f267 cover?

GHSA-m924-m654-f267 covers the following CVE IDs: CVE-2026-12342. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m924-m654-f267?

GHSA-m924-m654-f267 has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

GHSA-m924-m654-f267CriticalCVSS 9.6

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote...

Vendor

GitHub Security Advisories

Published

September 28, 2026

Last Modified

September 28, 2026

🔗 CVE IDs covered (1)

CVE-2026-12342 →

📋 Description

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to improper input validation of submitted web service API content.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-12342
https://www.sailpoint.com/security-advisories
https://github.com/advisories/GHSA-m924-m654-f267