In CISA KEV10.0 CriticalCWE-78
CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
IvantiSentry
Status
- Exploited in the wild
- In CISA KEV since 11 Jun
- Vendor fix available
Federal deadlineSun 14 Jun, 23:59 UTC
Passed 132 days ago
CISA KEV · added 11 Jun
Exploit probabilityEPSSchecked 25 Oct
99.9%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
10.0Critical
Description NVD
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Coverage 13 articles · 7 outlets
See the full timelineShow as table
- Ivanti Deploys AI to Uncover Hidden Flaws Like CVE-2026-10520Dark Reading
- CISA warns of active exploits in Ivanti, Cisco, Oracle and ChromeSecurityOnline
- CISA urges immediate patch for Ivanti Sentry CVE-2026-10520 flawSecurity Affairs
- Ivanti Sentry Exploitation Attempts Hitting HoneypotsSecurityWeek
- Spring Framework Patches Critical Flaws, Urges Immediate UpgradeSecurityOnline
- CISA Adds Ivanti Sentry Command Injection Flaw to KEV CatalogueCISA · official notice
- CISA warns of Ivanti Sentry flaw granting remote root accessCISA · official notice
- Critical Ivanti Sentry flaw exploited 24 hours after disclosureDark Reading
- Ivanti Sentry gateways compromised by CVE-2026-10520 injection bugSecurity Affairs
- CVE-2026-10520 lets hackers run root on Ivanti SentrySOCRadar
- CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti SentryRapid7
- Critical Vulnerabilities Patched in Fortinet, Ivanti ProductsSecurityWeek · mentions it in passing
- Ivanti patches CVE-2026-10520 gateway flaw after urgent alertSecurityOnline · first in our coverage · mentions it in passing