Ivanti Sentry critical RCE flaws allow unauthenticated remote attacks

Affected Systems

Ivanti Sentry products (specific versions not provided). Two critical vulnerabilities enable unauthenticated remote code execution on exposed devices.

Exploitation Status

No CVE assigned yet. Exploitation status unknown - advisory published June 9, 2026. No public PoC or active exploitation confirmed at time of analysis.

Business Impact

Unauthenticated RCE on Sentry devices represents immediate compromise risk for organizations using Ivanti Sentry for mobile device management gateway functions. Attackers could gain full control of exposed appliances, potentially pivoting to internal networks or intercepting mobile traffic. Ivanti products have been heavily targeted in recent years, increasing likelihood of rapid weaponization.

Urgency

🔴 Immediate

Recommended Actions

• Review Ivanti security advisory published June 9, 2026 for affected Sentry versions and apply patches immediately
• Identify all Ivanti Sentry instances in your environment and verify patch status
• Restrict network access to Sentry appliances - remove internet exposure where possible, implement strict firewall rules
• Monitor Sentry device logs for unusual authentication attempts, unexpected process execution, or configuration changes
• If patching cannot be completed within 24 hours, consider temporarily isolating Sentry devices from untrusted networks