cbcvebase.
CVE-2026-10520
published 2026-06-09

CVE-2026-10520: An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…

PriorityP197critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
KEVITWEXPLOITInitial access
CISA Known Exploited Vulnerabilitydue 2026-06-14
Exploited in the wild
EPSS
3.28%
87.5th percentile
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Detection & IOCsextracted from sources · hover to see the quote

url/mics/api/v2/sentry/mics-config/handleMessage
commandmessage=execute+system+%2Fconfiguration%2Fsystem%2Fcommandexec+%3Ccommandexec%3E%3Cindex%3E1%3C%2Findex%3E%3Creqandres%3Eid%3C%2Freqandres%3E%3C%2Fcommandexec%3E
commandmessage=execute%20system%20%2fconfiguration%2fsystem%2fcommandexec%20%3ccommandexec%3e%3cindex%3e1%3c%2findex%3e%3creqandres%3eecho%20CVE-2026-10520%3c%2freqandres%3e%3c%2fcommandexec%3e
path/configuration/system/commandexec
  • Detect POST requests to the unauthenticated endpoint /mics/api/v2/sentry/mics-config/handleMessage — any such request from an external/unauthenticated source is suspicious and indicative of CVE-2026-10520 exploitation attempts.
  • Look for the string 'execute system /configuration/system/commandexec' (URL-decoded) in POST body parameters named 'message' — this is the core exploit payload pattern.
  • Alert on HTTP 200 responses from /mics/api/v2/sentry/mics-config/handleMessage containing both 'Message handled successfully' and command output in the body — the Nuclei template uses these as confirmation of successful exploitation.
  • Use the Shodan query 'html:"Ivanti" html:"Sentry"' to identify internet-exposed Ivanti Sentry instances for proactive asset discovery and patch prioritization.
  • Monitor for the XML payload pattern <commandexec><index>...</index><reqandres>...</reqandres></commandexec> in HTTP POST bodies to /mics/api/v2/sentry/mics-config/handleMessage, which is the structure used to inject OS commands.
  • Shadowserver reported active backdooring of exposed Sentry instances within 24 hours of PoC release — treat any unpatched Sentry appliance reachable from the internet as likely compromised and perform forensic triage per CISA BOD 26-04 guidance.
  • ·The vulnerability is only externally exploitable when the Sentry appliance is in an unmanaged state with its endpoints externally reachable. Deployments using mTLS with EPMM or restricted HTTPS access through Neurons for MDM are not accessible to external actors.
  • ·Affected versions are Ivanti Sentry 10.7.0 and below, 10.6.1 and below, and 10.5.1 and below. Fixed versions are 10.7.1, 10.6.2, and 10.5.2.

CVSS provenance

nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
vulncheck10.0CRITICAL
cisa10.0CRITICAL