9.9
Critique
CVE-2026-10523 An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and…
Description
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sentry | Versions non publiées |
Références
- hub.ivanti.com hub.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Sentry
Les 6 CVE de Sentry →
CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated…
8.1
Élevée
CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
10.0
Critique
CVE-2023-39338
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not…
6.8
Moyenne
CVE-2024-8540
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker…
8.8
Élevée