Ivanti Sentry Exploitation Attempts Hitting Honeypots

The US Cybersecurity and Infrastructure Security Agency (CISA) has flagged a recently patched Ivanti Sentry vulnerability (CVE-2026-10520) with a critical CVSS score of 10/10, identified as an OS command injection that can be exploited remotely to execute arbitrary code with root privileges. Although Ivanti has issued patches and claims there is no evidence of actual exploitation, CISA included it in its Known Exploited Vulnerabilities (KEV) catalog, urging federal agencies to address it within three days. Ivanti indicates the risk depends on proper configuration, urging users to avoid exposing management interfaces to the internet.