Denial of Service Vulnerability in Ivanti Sentry by Ivanti
CVE-2026-123179

5.5MEDIUM

Key Information:

Vendor

Ivanti
Status
Sentry
Vendor
CVE Published:
10 November 2026

What is CVE-2026-123179?

The vulnerability arises from an insecure default initialization of resources in the Tomcat shutdown listener within Ivanti Sentry. This flaw allows a local authenticated attacker to manipulate system resources, potentially leading to a denial-of-service condition. Users of Ivanti Sentry versions prior to 10.7.4 and 10.8.3 are recommended to apply the necessary security updates to safeguard their systems.

Affected Version(s)

Sentry 11.0.0

Sentry 11.0.0

Sentry 10.8.3

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.