CyberSec.Space Logo
Back to CVE Browser

CVE-2026-10520

🔥 Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
EPSS Score70.5730%
EPSS Percentile97.41th
Published2026-06-09
Last Modified2026-06-12
Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US
🔗 https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520

Related Vulnerabilities

CVE-2026-674394.3

OliveTin gives safe and simple access to predefined shell commands from a web interface. Prior to 3000.17.0, the service/internal/...

CVE-2026-674386.6

OliveTin gives access to predefined shell commands from a web interface. From 3000.2.0 until 3000.17.0, the service/internal/execu...

CVE-2026-674377.5

OliveTin gives access to predefined shell commands from a web interface. From 3000.0.0 until 3000.17.0, the service/internal/auth/...

CVE-2026-659756.5

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. In versions 1.88.0 up to but n...

CVE-2026-10520 Detail & Impact Analysis | CVSS 10.0 (CRITICAL) | Cyber-Sec.Space | Cyber-Sec.Space