CVE-2026-10523

Published: Jun 9, 2026Modified: Jun 22, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

Affected (3)

Products: Ivanti: Standalone Sentry

Ivanti

1 product

Standalone Sentry

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Ivanti Standalone Sentry	Before 10.5.2
Ivanti Standalone Sentry	From 10.6.0 to 10.6.2
Ivanti Standalone Sentry	Version 10.7.0

Related CWEs

CWE-288

Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References (1)

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

PatchVendor Advisory

Timeline

No history available yet.