CVE-2026-10523

CRITICALCVSS 9.953% EPSS🧨 Public exploit (GreyNoise)

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

Published 2026-06-09 · last modified 2026-07-23

Affected products

VendorProduct
ivantistandalone_sentry

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.