CVE-2026-10520

🗓️ 15 Sep 2026 07:48:07Reported by KitPloitType

Pre-auth RCE and auth bypass in Ivanti Sentry enable unauthenticated full system compromise.

Reporter	Title	Published	Views	Family All 45
GithubExploit	Exploit for OS Command Injection in Ivanti Standalone_Sentry	1 Jul 202615:28	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Ivanti Standalone_Sentry	18 Jun 202620:20	–	githubexploit
GithubExploit	Exploit for CVE-2026-10520	9 Jun 202621:55	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Standalone_Sentry	24 Aug 202613:19	–	githubexploit
GithubExploit	Exploit for CVE-2026-10520	10 Jun 202608:33	–	githubexploit
BDU FSTEC	The vulnerability of the built-in mobile security firewall Ivanti Sentry lies in the lack of measures to neutralize specific elements, allowing a intruder to execute arbitrary commands with root privileges.	10 Jun 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the built-in mobile security firewall, Ivanti Sentry, relates to bypassing authentication using an alternative path or channel. This allows a intruder to elevate their privileges and gain full access to the device.	24 Jun 202600:00	–	bdu_fstec
Circl	CVE-2026-10520	9 Jun 202608:30	–	circl
Circl	CVE-2026-10523	9 Jun 202608:30	–	circl
CISA KEV Catalog	Ivanti Sentry OS Command Injection Vulnerability	11 Jun 202600:00	–	cisa_kev