# CVE-2026-123179: Ivanti Sentry insecure resource initialization in Tomcat shutdown listener

Source: https://junglewise.ai/threats/cve-2026-123179-an-insecure-default-initialization-of-resource-in-the-tomcat  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-10. Updated: 2026-11-10  
License: CC BY 4.0 with a link back

CVE-2026-123179 · Severity: medium · CVSS 5.5 · Published 2026-11-10

Ivanti Sentry is an identity and access management platform that manages user authentication and authorization across enterprise networks. An insecure resource initialization vulnerability in its Tomcat shutdown listener allows a local authenticated attacker to crash the service, causing denial of service and potential loss of access control. This affects versions before 10.7.4 and 10.8.3.

Technologies: [Ivanti Sentry](https://junglewise.ai/threats/technologies/sentry). Vendors: [Ivanti](https://junglewise.ai/threats/vendors/ivanti).

## Quick answers

**Is CVE-2026-123179 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-123179 being exploited in the wild.

**How severe is CVE-2026-123179?** Medium severity, with a CVSS score of 5.5, published 10 November 2026.

**Which products and versions are affected?** Ivanti Sentry before 10.7.4 and 10.8.3.

**Is there a fix for CVE-2026-123179?** Yes: fixed in Ivanti Sentry 10.7.4, 10.8.3. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-123179 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-123179?** Check whether you run Ivanti Sentry at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Ivanti Sentry 10.7.4, 10.8.3

## Technical details

The Tomcat shutdown listener in Ivanti Sentry fails to properly initialize resources, creating a vulnerability that can be exploited by an authenticated local attacker. The attack requires local network access and authentication credentials to trigger a denial-of-service condition that disrupts the service.

## Affected products

- Ivanti Sentry before 10.7.4 and 10.8.3

## Timeline

- 2026-11-10: disclosed

## References

- [https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-105425-CVE-2026-105669-CVE-2026-123179-and-CVE-2026-123181](https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-105425-CVE-2026-105669-CVE-2026-123179-and-CVE-2026-123181)

## Related threats

- [Ivanti Sentry path traversal in administrative interface](https://junglewise.ai/threats/cve-2026-123181-a-path-traversal-vulnerability-in-ivanti-sentry-before-versions)
- [Ivanti Sentry argument injection vulnerability](https://junglewise.ai/threats/cve-2026-105669-argument-injection-in-ivanti-sentry-before-version-10-8-3-and-10)
- [Ivanti Sentry and EPMM OS command injection](https://junglewise.ai/threats/cve-2026-105425-os-command-injection-in-ivanti-sentry-before-versions-10-7-4-10)
- [Ivanti Sentry authentication bypass](https://junglewise.ai/threats/cve-2026-83527-ivanti-sentry-authentication-bypass)
- [Ivanti Sentry authentication bypass in administrative interface](https://junglewise.ai/threats/cve-2026-10523-ivanti-sentry-authentication-bypass-in-administrative-interface)