9.9
Critical
CVE-2026-10523 An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and…
Description
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sentry | Versions not published |
References
- hub.ivanti.com hub.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Sentry
The 6 CVEs of Sentry →
CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated…
8.1
High
CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
10.0
Critical
CVE-2023-39338
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not…
6.8
Medium
CVE-2024-8540
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker…
8.8
High