CVE Catalog
CVE-2026-10523
CriticalCVSS 9.9Exploitation Probability (EPSS)
Very high risk47.19%
99th percentile - higher than 99% of all known CVEs
Summary
An Authentication Bypass vulnerability in Ivanti Sentry before versions R10.5.2, R10.6.2, and R10.7.1 allows a remote unauthenticated attacker to create arbitrary administrative accounts. This leads to full administrative access.
Risk Assessment
An attacker with no credentials can gain full control over the Ivanti Sentry system, compromising the entire infrastructure.
Recommendation
Immediately update Ivanti Sentry to version R10.5.2, R10.6.2, R10.7.1 or later.
Original NVD description (English source)
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access