Ivanti Sentry vulnerabilities
6 published CVEs name Ivanti Sentry among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 6
- Last 12 months
- 3
- Critical
- 3
- Known exploited
- 1
Critical 3High 2Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20242
- 20251
- 20263
Known exploitedNewest addition to KEV first
- CVE-2026-10520
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…
ivanti · Sentry
ExploitedCritical10.0
Newest CVEs
- CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level…
Ivanti · Sentry
High8.1 - CVE-2026-10523
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to…
ivanti · Sentry
Critical9.9 - CVE-2026-10520
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…
ivanti · Sentry
ExploitedCritical10.0 - CVE-2023-39338
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to…
Ivanti · Sentry
Medium6.8 - CVE-2024-8540
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application…
Ivanti · Sentry
High8.8 - CVE-2023-41724
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying…
Ivanti · Sentry
Critical9.6