{"affected":[{"defaultStatus":"affected","product":"Sentry","source":"CNA: ivanti","vendor":"Ivanti","versions":[{"status":"unaffected","version":"11.0.0","versionType":"custom"},{"status":"unaffected","version":"10.8.3","versionType":"custom"},{"status":"unaffected","version":"10.7.4","versionType":"custom"}]},{"defaultStatus":"affected","product":"Endpoint Manager Mobile","source":"CNA: ivanti","vendor":"Ivanti","versions":[{"status":"unaffected","version":"12.11.0.0","versionType":"custom"},{"status":"unaffected","version":"12.10.0.1","versionType":"custom"},{"status":"unaffected","version":"12.9.0.3","versionType":"custom"}]}],"cveId":"CVE-2026-105425","cwes":["CWE-78"],"description":"OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker with admin privileges to achieve remote code execution.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.2,"severity":"high","source":"CNA: ivanti","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.2,"severity":"high","source":"NVD: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1794374356313,"publishedAt":1794325380759,"references":[{"source":"CNA: ivanti","tags":[],"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-105425-CVE-2026-105669-CVE-2026-123179-and-CVE-2026-123181"},{"source":"CNA: ivanti","tags":[],"url":"https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs"},{"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","tags":[],"url":"https://hub.ivanti.com/s/article/November-2026-Security-Advisory-Ivanti-EPMM-Multiple-CVEs"},{"source":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","tags":[],"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-105425-CVE-2026-105669-CVE-2026-123179-and-CVE-2026-123181"}],"remediation":[],"revision":"ad32550ec7c586f2a0d5422d1b7e29c5bd0134b8fa46cad838f338df49f55f39","sources":[{"modifiedAt":1794372978329,"name":"CNA: ivanti","retrievedAt":1794373705488,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105425"},{"modifiedAt":1794374356313,"name":"NVD","retrievedAt":1794377789799,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105425"}],"ssvc":{"assessedAt":1794268800000,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"CVE-2026-105425","updatedAt":1794377789799}