Ivanti Sentry vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ivanti Sentry: 3 record(s), with affected versions and fixes.
CVE-2026-83527
High · 8.1
CWE-288 Sep 8, 2026
Authentication Bypass Using an Alternate Path or Channel in Ivanti Sentry
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access.
CVE-2026-10523
Critical · 9.8
CWE-288 Jun 9, 2026
Authentication Bypass Using an Alternate Path or Channel in Ivanti Standalone Sentry
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
CVE-2026-10520
Critical · 10.0
KEV Urgent · 73 Public exploit CWE-78 Jun 9, 2026
Ivanti Sentry OS Command Injection Vulnerability
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution