Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9 (2 minute read)

2026-06-11

Ivanti warns that two critical Ivanti Sentry bugs allow remote, unauthenticated attackers to gain root or create admin accounts on affected gateways. One flaw abuses an exposed Tomcat API to run injected MICS commands as root. Ivanti blocks unauthenticated access and hard-codes commands, and tells customers to upgrade Sentry to 10.5.2, 10.6.2, or 10.7.1 immediately.