CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.9. It affects Ivanti. Its EPSS score suggests a 51.9% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2026-10523
Severity
CRITICAL
CVSS
9.9
EPSS
51.87%
Ivanti
Original NVD Description
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access
Related CVEs
Other vulnerabilities affecting the same vendor(s)