CVE-2026-123179: Medium severity vulnerability

Published Nov 10, 2026

Updated

An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial of service.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ivanti Sentry to a version that resolves this vulnerability.
Fixed in 10.7.4
Upgrade
Upgrade Ivanti Sentry to a version that resolves this vulnerability.
Fixed in 10.8.3

Event History

Nov 10, 2026

CVE Published

via MITRE·03:49 PM

Data Sourced

via MITRE·03:49 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Ivanti Sentry deployments running versions earlier than 10.7.4 or 10.8.3 are affected.

What access does an attacker need?

Exploitation requires local access and authentication with low privileges. No user interaction is required.

What is the impact of successful exploitation?

A successful attacker can cause a denial of service. The provided severity vector indicates no confidentiality or integrity impact.

What is the recommended remediation?

Upgrade Ivanti Sentry to version 10.7.4 or 10.8.3, as applicable.

CVE-2026-123179: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

What is the impact of successful exploitation?

What is the recommended remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What access does an attacker need?

What is the impact of successful exploitation?

What is the recommended remediation?