CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
Description
CVE-2026-10520 is a maximum-severity OS command injection vulnerability in Ivanti Sentry that allows a remote, unauthenticated attacker to achieve root-level remote code execution. Because the affected functionality passes attacker-controlled input into an operating system command without proper neutralization, an attacker can run arbitrary commands as root on the appliance. CVE-2026-10520 carries a CVSS 3.1 base score of 10.0 (Critical) with a changed scope, is listed in the CISA KEV catalog, and has a very high EPSS score. It affects Ivanti Sentry before R10.5.2, R10.6.2, and R10.7.1. Given unauthenticated root RCE on a network security appliance, organizations running Ivanti Sentry should patch immediately and investigate for compromise.
KEV Information
CVSS Score
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HOpen in CalculatorAffected Products
| Vendor | Product | Version |
|---|---|---|
| ivanti | standalone sentry | < 10.5.2; >= 10.6.0, < 10.6.2; 10.7.0 |
References
- https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US(Patch, Vendor Advisory)
- https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523(Third Party Advisory)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520(US Government Resource)
Weakness Type
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2026-10520 is classified under CWE-78 — OS Command Injection. Ivanti Sentry builds an operating system command using externally supplied input but fails to neutralize shell metacharacters, so an attacker can inject additional commands that the appliance executes. Because the vulnerable path is reachable without authentication and runs with high privilege, the injection results directly in root-level command execution.
Learn more: CWE-78 — OS Command Injection
Impact Analysis
CVE-2026-10520 carries a CVSS 3.1 base score of 10.0 (Critical), the maximum possible. Attack Vector (Network): the appliance is exploitable remotely without physical access. Attack Complexity (Low): no special conditions are required. Privileges Required (None) and User Interaction (None): the attacker needs no credentials and no victim action. Scope (Changed): code execution affects resources beyond the vulnerable component, reflecting full control of the underlying system. Confidentiality, Integrity and Availability (High): root-level command execution gives the attacker complete control of the Sentry appliance, including its data, configuration, and the network traffic it brokers. With an EPSS score of about 60% (99th percentile) and confirmed active exploitation, this is an emergency-grade vulnerability that should be treated as an active incident risk.
Exploit Maturity
CISA has added CVE-2026-10520 to the Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Public proof-of-concept code is available — watchTowr Labs published an exploit repository covering CVE-2026-10520 (and CVE-2026-10523) at watchTowr-vs-Ivanti-Sentry-RCE. The EPSS score of about 60% (99th percentile) indicates near-certain exploitation activity. With unauthenticated root RCE, confirmed exploitation, and a public PoC, this vulnerability demands immediate action.
Remediation
- Follow Ivanti's and CISA's required action and upgrade Ivanti Sentry to R10.5.2, R10.6.2, or R10.7.1 (or later) as documented in the vendor security advisory.
- Map your running version to the correct fixed release: versions below 10.5.2, the 10.6.0–10.6.1 range, and 10.7.0 are affected.
- As an interim mitigation, restrict network access to the Sentry management and service interfaces to trusted networks until the patch is applied.
- Because public proof-of-concept code exists and exploitation is confirmed, hunt for compromise: review logs and system state for injected commands, unexpected processes, and persistence, and rotate any secrets the appliance held.
- As long-term hardening, avoid invoking OS commands from application code and use parameterized APIs that separate commands from data (per the CWE-78 guidance).
Technical Details
The vulnerability is an instance of CWE-78 (OS Command Injection): Ivanti Sentry constructs an OS command from externally influenced input and executes it through a system shell without neutralizing special elements such as semicolons, pipes, or backticks. As captured by the CVSS vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, a remote unauthenticated attacker sends a crafted request that injects shell metacharacters into the command, causing the appliance to execute attacker-chosen commands as root. The changed scope reflects that this root execution compromises the entire underlying operating system, not just the vulnerable application component.
Frequently Asked Questions
Is CVE-2026-10520 being actively exploited?
Yes. CVE-2026-10520 is listed in CISA's Known Exploited Vulnerabilities catalog, and watchTowr Labs has published public proof-of-concept exploit code. Its EPSS score of about 60% (99th percentile) indicates near-certain exploitation activity.
What products are affected by CVE-2026-10520?
Ivanti Sentry is affected in versions before R10.5.2, in the R10.6.0–R10.6.1 range, and in R10.7.0. Fixed versions are R10.5.2, R10.6.2, and R10.7.1.
How do I fix CVE-2026-10520?
Upgrade Ivanti Sentry to R10.5.2, R10.6.2, or R10.7.1 (or later) per the Ivanti advisory. Because exploitation is confirmed and a PoC is public, also investigate the appliance for signs of compromise and rotate stored secrets.
How severe is CVE-2026-10520?
It is rated Critical with the maximum CVSS 3.1 base score of 10.0. It enables unauthenticated, remote root-level code execution and is confirmed as actively exploited with a public PoC, making it one of the most urgent vulnerabilities to remediate.
Need Help With Vulnerability Management?
Our security experts can help you prioritize and remediate vulnerabilities effectively.