A vulnerability was found in SailPoint IdentityIQ up to 8.4p3/8.5p1. It has been classified as problematic. The affected element is an unknown function of the component Debug Page. The manipulation leads to incorrect authorization.

This vulnerability is listed as CVE-2026-4857. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.