CVE-2026-10520

Known Exploited (CISA KEV)CRITICAL

10.0

CVSS Severity Score

EPSS Score70.5730%

EPSS Percentile97.41th

Published2026年6月9日

Last Modified2026年6月12日

Vulnerability Description

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Affected Platforms (CPE)

📦

Ivanti

Sentry

Refer to description

References & Advisories

🔗 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US

🔗 https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520

Vulnerability Description

Affected Platforms (CPE)

Sentry

References & Advisories

関連する脆弱性情報