/Vulnerability Library

Ivanti Sentry - OS Command Injection

CVE-2026-10520
Verified

Description

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Severity

Critical

Published Date

June 10, 2026

Template Author

dhiyaneshdk

CVE-2026-10520.yaml
9.5Severity

CVSS Metrics

References

https://nvd.nist.gov/vuln/detail/CVE-2026-10520https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523/blob/main/README.md

Remediation Steps

Upgrade to versions R10.5.2, R10.6.2, or R10.7.1 or later.