CVE-2026-5712: Sailpoint Identityiq

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Affected products

• Sailpoint Identityiq: before 8.3 (fixed in 8.3); version 8.3 only; version 8.4 only; version 8.5 only

Published 2026-04-29. Last modified 2026-06-17.