CVE-2026-10523

ivanti / Sentry PUBLISHED

Description (CNA)

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

Affected (CNA)

Vendor / product	Versions
ivanti / Sentry	unaffected R10.5.2; unaffected R10.6.2; unaffected R10.7.1

CWE

CWE-288

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.