CVE WATCH / VULNERABILITY DETAIL
CVE-2026-105425
HIGHCVSS 7.2NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125754 HIGH 7.1
- CVE-2026-125753 MEDIUM 5.9
- CVE-2026-125747 MEDIUM 5.4
- CVE-2026-124038 LOW 2.3
- CVE-2026-123181 MEDIUM 5.5
- CVE-2026-123179 MEDIUM 5.5
- CVE-2026-121683 CRITICAL 9.4
- CVE-2026-121653 CRITICAL 9.8
- CVE-2026-111256
- CVE-2026-111250