Skip to content

Vulnerabilities of Ivanti Sentry

Is your version affected?

CVE Summary Score Published
CVE-2026-83527 An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated… 8.1 High Sep 8, 2026
CVE-2026-10523 An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and… 9.9 Critical Jun 9, 2026
CVE-2026-10520 Exploited Ivanti Sentry OS Command Injection Vulnerability 10.0 Critical Jun 9, 2026
CVE-2023-39338 Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not… 6.8 Medium Jul 12, 2025
CVE-2024-8540 Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker… 8.8 High Dec 10, 2024
CVE-2023-41724 A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute… 9.6 Critical Mar 31, 2024

Other Ivanti products