CVE-2026-10520

🗓️ 09 Jun 2026 14:10:21Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 19 Media mentions👁 274 Views🌐 WEB

Ivanti Sentry OS command injection before versions R10.5.2, R10.6.2, and R10.7.1 permits remote unauthenticated root code execution.

Reporter	Title	Published	Views	Family All 35
GithubExploit	Exploit for OS Command Injection in Ivanti Standalone_Sentry	1 Jul 202615:28	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Ivanti Standalone_Sentry	18 Jun 202620:20	–	githubexploit
GithubExploit	Exploit for CVE-2026-10520	9 Jun 202621:55	–	githubexploit
GithubExploit	Exploit for CVE-2026-10520	10 Jun 202608:33	–	githubexploit
BDU FSTEC	The vulnerability of the built-in mobile security firewall Ivanti Sentry lies in the lack of measures to neutralize specific elements, allowing a intruder to execute arbitrary commands with root privileges.	10 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the built-in mobile security firewall Ivanti Sentry arises from the use of an alternative path or channel, which allows a intruder to elevate their privileges and gain full access to the device.	24 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-10520	9 Jun 202608:30	–	circl
Circl	CVE-2026-10523	9 Jun 202608:30	–	circl
CISA KEV Catalog	Ivanti Sentry OS Command Injection Vulnerability	11 Jun 202600:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	11 Jun 202612:00	–	cisa

NVD

Vulners

Node

ivanti standalone_sentryRange<10.5.2

ivanti standalone_sentryRange10.6.0–10.6.2

ivanti standalone_sentryMatch10.7.0

[
  {
    "vendor": "ivanti",
    "product": "Sentry",
    "versions": [
      {
        "status": "unaffected",
        "version": "R10.5.2"
      },
      {
        "status": "unaffected",
        "version": "R10.6.2"
      },
      {
        "status": "unaffected",
        "version": "R10.7.1"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
hub	www.hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
github	www.github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

Parameter	Position	Path	Description	CWE
message	request body	mics/api/v2/sentry/mics-config/handleMessage	Unauthenticated OS command injection via MICS handleMessage endpoint (XML-wrapped commands via URL-encoded message in POST body)	CWE-78

23 Jul 2026 08:10Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.110

EPSS0.99889

SSVC