Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-105669

Sentry · Vulnerability

CVSS 3.1 6.7 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-105669

Published

Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.

Read the publisher's advisory

Affected versions, risk and source history

Related advisories and sources

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-105669 · CVE overview and exploitation status

cve-program · CVE-2026-105669

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-105425-CVE-2026-105669-CVE-2026-123179-and-CVE-2026-123181

Related changes

Linked by CVE identifier

Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries. · Newly collected advisory · 10 Nov 2026
Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries. · Advisory content revised · 10 Nov 2026