Ivanti Sentry
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-83527 | | An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain admini | HIGH 8.1 | 1.8 % | ||
| CVE-2026-10523 | | An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthent | CRITICAL 9.9 | 53 % | ||
| CVE-2026-10520 | | An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user | CRITICAL 10.0 | 100 % | KEV | |
| CVE-2023-39338 | 9.0 – < 9.20 | Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sen | MEDIUM 6.8 | 0.9 % | ||
| CVE-2024-8540 | fixed in 9.20.2, 10.0.2, 10.1.0 | Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive a | HIGH 8.8 | 0.3 % | ||
| CVE-2023-41724 | 9.19.0 | A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the | CRITICAL 9.6 | 13 % |