CVE-2026-10523: standalone sentry vulnerability

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
CVE-2026-10523CVSS 9.9VPN

CVE-2026-10523: standalone sentry vulnerability

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

CVSS
9.9 CRITICAL
EPSS
98.69%
Known exploited
not in KEV
Product
standalone sentry

What is known

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

Sources

Back to security hubContact DataHouse