Sentry (Ivanti) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-08. Vendor: Ivanti.

CVEs of Sentry

• CVE-2026-83527 - CVSS 8.1 (high), 2026-09-08: An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level…
• CVE-2026-10523 - CVSS 9.9 (critical), 2026-06-09: An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to…
• CVE-2026-10520 - CVSS 10 (critical), 2026-06-09: An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…
• CVE-2023-39338 - CVSS 6.8 (medium), 2025-07-12: Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to…
• CVE-2024-8540 - CVSS 8.8 (high), 2024-12-10: Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application…
• CVE-2023-41724 - CVSS 9.6 (critical), 2024-03-31: A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying…