Standalone Sentry vulnerabilities

3 known vulnerabilities in Standalone Sentry from Ivanti. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Sentry: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-10523Jun 9, 2026IvantiEPSS 54%

  An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access

• 10.0 Critical severity

  Ivanti Sentry OS Command Injection Exploited

  CVE-2026-10520Jun 9, 2026IvantiEPSS 99.9%

  An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

• 8.8 High severity

  Sentry: Improper Neutralization of Special Elements used in a Command

  CVE-2023-41724Mar 31, 2024IvantiEPSS 12.8%

  A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.