Medium severity5.5NVD Advisory· Published Nov 10, 2026
CVE-2026-123179
CVE-2026-123179
Description
An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial of service.
Affected products
1- Range: <10.7.4, <10.8.3
Patches
Vulnerability mechanics
References
1News mentions
1- Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace ManagerCyber Security News · Nov 10, 2026