CVE-2026-105425

7.2 HIGH

Published 2026-11-10 · Updated 2026-11-11

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

All references

https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-105425-CVE-2026-105669-CVE-2026-123179-and-CVE-2026-123181

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2013-20007PoC
HIGHCVE-2020-37279PoC
CRITICALCVE-2020-37282PoC
HIGHCVE-2022-51019PoC
CRITICALCVE-2024-4457PoC
HIGHCVE-2025-14754
CRITICALCVE-2025-31704
CRITICALCVE-2025-71429PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.