CVE-2026-10520

🔥 Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score70.5730%

EPSS Percentile97.41th

Published2026-06-09

Last Modified2026-06-12

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US

🔗 https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

関連する脆弱性情報