Armadin(@ArmadinSecurity):Armadin researcher @0xc0ffee_ has uncovered a critical unauthenticated RCE vulnerability affecting all versions of SailPoint IdentityIQ (CVE-2026-12342). Given IdentityIQ handles sensitive credentials and access, this flaw presents a high risk of secret exposure and lateral movement into internal networks. Patch immediately. Advisory and mitigation details:

Armadin

@ArmadinSecurity

Armadin is an AI-native cybersecurity company focused on building the ultimate attacker.

Joined October 2025

18 Following 952 Followers

Armadin@ArmadinSecurity

2026.09.29 14:18

Armadin researcher @0xc0ffee_ has uncovered a critical unauthenticated RCE vulnerability affecting all versions of SailPoint IdentityIQ (CVE-2026-12342). Given IdentityIQ handles sensitive credentials and access, this flaw presents a high risk of secret exposure and lateral movement into internal networks. Patch immediately. Advisory and mitigation details: