CVE-2026-105669: Medium severity vulnerability

Published Nov 10, 2026

Updated

Argument injection in Ivanti Sentry before version 10.8.3 and 10.7.4 allows a remote authenticated attacker with admin privileges to execute arbitrary on-disk binaries.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ivanti Sentry to a version that resolves this vulnerability.
Fixed in 10.8.3

Event History

Nov 10, 2026

CVE Published

via MITRE·03:45 PM

Data Sourced

via MITRE·03:45 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be remote, authenticated, and have administrative privileges on Ivanti Sentry. The issue does not describe exploitation by unauthenticated or lower-privileged users.

Which Ivanti Sentry versions need remediation?

Ivanti Sentry versions before 10.8.3 and before 10.7.4 are affected. Upgrade to the applicable fixed version in your deployment branch.

What is the impact of successful exploitation?

A successful attacker can use argument injection to execute arbitrary binaries already present on disk. The stated impact includes limited confidentiality impact and high integrity and availability impact.

CVE-2026-105669: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

Which Ivanti Sentry versions need remediation?

What is the impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which Ivanti Sentry versions need remediation?

What is the impact of successful exploitation?