What is GHSA-7mfg-3gc5-q3w2?

GHSA-7mfg-3gc5-q3w2 is a security advisory published by GitHub Security Advisories with High severity. This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker...

Which CVE IDs does GHSA-7mfg-3gc5-q3w2 cover?

GHSA-7mfg-3gc5-q3w2 covers the following CVE IDs: CVE-2026-12341. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7mfg-3gc5-q3w2?

GHSA-7mfg-3gc5-q3w2 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-7mfg-3gc5-q3w2HighCVSS 8.8

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker...

Vendor

GitHub Security Advisories

Published

July 20, 2026

Last Modified

July 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-12341 →

📋 Description

This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-12341
https://www.sailpoint.com/security-advisories
https://github.com/advisories/GHSA-7mfg-3gc5-q3w2