PT-2026-47807 · Ivanti · Sentry

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-10523

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Sentry versions prior to R10.5.2 Ivanti Sentry versions prior to R10.6.2 Ivanti Sentry versions prior to R10.7.1

Description An authentication bypass allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-10523

Affected Products

Sentry

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-10523 · Security Note
• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US · Note
• https://twitter.com/KaitanSecurity/status/2064384545437200649 · Twitter Post