CVE-2026-10523

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

Score

CVSS 3.1 9.9 Critical

Status

Analyzed - 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Published

2026-06-09

Last modified

2026-06-10

Weaknesses

CWE-288

Affected products

• Sentry (Ivanti)
• Standalone Sentry (Ivanti)

References

• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US