CVE-2026-105669: Ivanti Sentry argument injection vulnerability

CVE-2026-105669 · Severity: medium · CVSS 6.7 · Published 2026-11-10

Ivanti Sentry is a privileged access management solution that controls who can execute sensitive administrative tasks. An authenticated administrator can inject arguments into system commands to execute arbitrary programs on the server, potentially leading to unauthorized code execution and system compromise.

Technologies: Ivanti Sentry. Vendors: Ivanti.

Quick answers

Is CVE-2026-105669 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-105669 being exploited in the wild.
How severe is CVE-2026-105669?
Medium severity, with a CVSS score of 6.7, published 10 November 2026.
Which products and versions are affected?
Ivanti Sentry before 10.8.3 and 10.7.4.
Is there a fix for CVE-2026-105669?
Yes: fixed in Sentry 10.8.3, 10.7.4. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-105669 attacked?
It is attacked over the network.
Am I affected by CVE-2026-105669?
Check whether you run Ivanti Sentry at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • Fixed in: Sentry 10.8.3, 10.7.4

Technical details

An argument injection flaw in Ivanti Sentry allows a remote authenticated attacker with admin privileges to manipulate command-line arguments and execute arbitrary on-disk binaries on the affected system. The vulnerability requires valid administrative credentials and network access to the Sentry interface. This could enable privilege escalation or lateral movement within the environment.

Affected products

  • Ivanti Sentry before 10.8.3 and 10.7.4

Timeline

  • 2026-11-10: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.