Ivanti Standalone Sentry vulnerabilities

4 vulnerabilities

Known vulnerabilities in Ivanti Standalone Sentry, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2024-8540ivantistandalone_sentry
EPSS score
0.25%
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components.10CVE-2026-10520ivantistandalone_sentryKEV
EPSS score
99.91%
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution9.9CVE-2026-10523ivantistandalone_sentry
EPSS score
53.14%
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access9.6CVE-2023-41724ivantisentry+1
EPSS score
12.84%
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.