Ivanti Sentry <10.7.4 & <10.8.3 Tomcat shutdown listener DoS
CVE-2026-123179 Published on November 10, 2026
An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions 10.7.4 and 10.8.3 allows a local authenticated attacker to cause a denial of service.
Vulnerability Analysis
CVE-2026-123179 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Weakness Type
Insecure Default Initialization of Resource
The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.
Affected Versions
Ivanti Sentry:- Version 11.0.0 is unaffected.
- Version 10.8.3 is unaffected.
- Version 10.7.4 is unaffected.