An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
| CVE | CVE-2026-10523 |
|---|---|
| Severidad | CRITICAL |
| CVSS | 9.9 / 10 |
| EPSS | 53.1% en 30 días (percentil 99) |
| CWE | CWE-288 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |
| PoC público | github.com |
Productos afectados (catálogo NVD)
ivanti/standalone_sentry