CVE-2026-10520

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution...

CVE-2026-10523

An Authentication Bypass vulnerability CWE-288 in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access...

CVE-2026-10520

CVE-2026-10520 affects Ivanti Sentry prior to R10.5.2, R10.6.2 and R10.7.1. It is an OS Command Injection vulnerability that allows a remote unauthenticated user to achieve root-level remote code execution (CVSS v3.1: 10.0, critical, network access, no user interaction). Remediation: upgrade to t...

PT-2026-47806

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution...