Ivanti Standalone Sentry — known CVE vulnerabilities

Every CVE whose affected-product data names Ivanti Standalone Sentry, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2026-10520 — CVSS 10.0 (critical) — actively exploited: An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated…
• CVE-2026-10523 — CVSS 9.9 (critical): An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote…
• CVE-2023-41724 — CVSS 8.8 (high): A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the…
• CVE-2024-8540 — CVSS 8.8 (high): Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive…