Skip to content
CVE PROGRAM SOURCE RECORD9.9 Critical

CVE-2026-10523

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary admi

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ivanti

Description

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ivanti Sentry

Default version status: affected

  • R10.5.2unaffected
  • R10.6.2unaffected
  • R10.7.1unaffected

References