CVE-2026-105425
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.