Ivanti patches max-severity Sentry flaws

2026-06-11

Ivanti patched two critical Sentry vulnerabilities, including a maximum-severity OS command injection bug that can let unauthenticated attackers execute code as root. A second authentication bypass flaw can let remote attackers create rogue admin accounts and gain full administrative access.