Max severity Ivanti Sentry vulnerability now exploited in attacks
Source Bleeping Computer
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 12 Jun 2026, 12:03 UTC
What to do
AI-suggested
Ivanti has released official patches addressing this vulnerability in versions R10.5.2, R10.6.2, and R10.7.1 of Ivanti Sentry. Organizations should immediately apply these updates to affected systems. Since the vulnerability is actively exploited in the wild, unpatched systems are likely compromised. Ivanti has not updated its advisory to reflect ongoing exploitation, so users should rely on the patch and external security reports for guidance. No alternative mitigations or workarounds are indicated in the available information. Prompt patching is the primary and necessary remediation.
Description
Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. [...]