SE
Product
Sentry
On CISA KEVExploited in the wildRansomware-linked
6
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 2Low 0
Watch
Add Sentry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10520 In wildKEV | 10.0 | Jun 9 | Ivanti Sentry OS Command Injection Vulnerability Affected: All versions, or not specified |
| CVE-2023-38035 RansomwareIn wildKEV | 9.8 | Aug 21 | Ivanti Sentry Authentication Bypass Vulnerability Affected: All versions, or not specified |
| CVE-2026-10523 | 9.8 | Jun 9 | An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary… Affected: All versions, or not specified |
| CVE-2026-83527 | 8.1 | Sep 8 | An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access Affected: All versions, or not specified |
| CVE-2023-39338 | 6.8 | Jul 12 | Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service Affected: 9.0 before 9.20 |
| CVE-2024-8540 | 5.5 | Dec 10 | Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components Affected: All versions, or not specified |
Showing 6