SB20261110344 - Multiple vulnerabilities in Ivanti Sentry

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261110344

SB20261110344 - Multiple vulnerabilities in Ivanti Sentry

Published: November 10, 2026

Security Bulletin ID SB20261110344
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 5
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 5 vulnerabilities.


1) OS Command Injection (CVE-ID: CVE-2026-105425)

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote privileged user to execute arbitrary code.

The vulnerability exists due to OS command injection in Ivanti Sentry and Ivanti Endpoint Manager Mobile when processing user-supplied input. A remote privileged user can supply input containing injected operating system commands to execute arbitrary code.


2) Argument injection (CVE-ID: CVE-2026-105669)

CWE-ID: CWE-88 - Argument Injection or Modification

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote privileged user to execute arbitrary binaries already present on disk.

The vulnerability exists due to improper neutralization of command arguments in Ivanti Sentry when processing user-supplied input used as command arguments. A remote privileged user can supply crafted input that injects command arguments to execute arbitrary binaries already present on disk.


3) Insecure Default Initialization of Resource (CVE-ID: CVE-2026-123179)

CWE-ID: CWE-1188 - Insecure Default Initialization of Resource

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to insecure default initialization of a resource in the Ivanti Sentry Tomcat shutdown listener when initializing the listener. A local user can exploit the insecurely initialized listener to cause a denial of service.


4) Path traversal (CVE-ID: CVE-2026-123181)

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote privileged user to create arbitrary directories and files with root privileges.

The vulnerability exists due to improper restriction of file paths in Ivanti Sentry when processing user-supplied paths. A remote privileged user can supply crafted paths that traverse outside the intended directory to create arbitrary directories and files with root privileges.


5) Exposure of Private Information ('Privacy Violation') (CVE-ID: CVE-2026-83528)

CWE-ID: CWE-359 - Exposure of Private Information ('Privacy Violation')

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote privileged user to disclose personally identifiable user information protected under the GDPR.

The vulnerability exists due to exposure of private personal information in Ivanti Endpoint Manager Mobile when handling user information. A remote privileged user can access exposed personally identifiable information to disclose GDPR-protected user data.


Remediation

Install update from vendor's website.

References