9.9 CriticalCWE-288
CVE-2026-10523
ivanti Sentry vulnerability
ivantiSentry
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 24 Oct
53%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
SeverityCVSS
9.9Critical
Description NVD
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
Coverage 2 articles · 2 outlets
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 10 Jun · 06:10 UTC | SecurityOnline | Ivanti patches CVE-2026-10520 gateway flaw after urgent alert |
| Wed 10 Jun · 11:30 UTC | Rapid7 | CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry |
- CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti SentryRapid7 · mentions it in passing
- Ivanti patches CVE-2026-10520 gateway flaw after urgent alertSecurityOnline · first in our coverage · mentions it in passing