CVE-2026-123181: Path Traversal

Published Nov 10, 2026

Updated

A path traversal vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Ivanti Sentry to a version that resolves this vulnerability.
Fixed in 10.7.4
Upgrade
Upgrade Ivanti Sentry to a version that resolves this vulnerability.
Fixed in 10.8.3

Event History

Nov 10, 2026

CVE Published

via MITRE·03:52 PM

Data Sourced

via MITRE·03:52 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must be remote, authenticated, and already have administrative privileges in Ivanti Sentry. The vulnerability affects Ivanti Sentry versions before 10.7.4 and 10.8.3.

What could a successful attacker do?

A successful attacker can use path traversal to create arbitrary directories and files with root privileges. This can affect system integrity and may also cause limited availability impact.

What versions should be remediated?

Upgrade affected Ivanti Sentry deployments to version 10.7.4 or 10.8.3, depending on the supported release branch in use. Versions before those releases are affected.

CVE-2026-123181: Path Traversal

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What could a successful attacker do?

What versions should be remediated?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What could a successful attacker do?

What versions should be remediated?