cbcvebase.
CVE-2026-10520
published 2026-06-09

CVE-2026-10520: An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve…

PriorityP1100critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
KEVITWEXPLOITInitial access
CISA Known Exploited Vulnerabilitydue 2026-06-14
Exploited in the wild
EPSS
99.89%
100.0th percentile
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

Affected

3 ranges
VendorProductVersion rangeFixed in
ivantistandalone_sentry< 10.5.210.5.2
ivantistandalone_sentry
ivantistandalone_sentry>= 10.6.0 < 10.6.210.6.2

Detection & IOCsextracted from sources · hover to see the quote

url/mics/api/v2/sentry/mics-config/handleMessage
commandmessage=execute+system+%2Fconfiguration%2Fsystem%2Fcommandexec+%3Ccommandexec%3E%3Cindex%3E1%3C%2Findex%3E%3Creqandres%3Eid%3C%2Freqandres%3E%3C%2Fcommandexec%3E
commandmessage=execute%20system%20%2fconfiguration%2fsystem%2fcommandexec%20%3ccommandexec%3e%3cindex%3e1%3c%2findex%3e%3creqandres%3eecho%20CVE-2026-10520%3c%2freqandres%3e%3c%2fcommandexec%3e
othershodan-query: html:"Ivanti" html:"Sentry"
  • Detect exploitation attempts by monitoring for POST requests to the unauthenticated endpoint /mics/api/v2/sentry/mics-config/handleMessage, particularly with a body containing the 'message' parameter with 'execute system /configuration/system/commandexec' payload pattern.
  • Look for HTTP 200 responses from /mics/api/v2/sentry/mics-config/handleMessage containing the string 'Message handled successfully', which indicates the command injection payload was accepted and processed.
  • Monitor for Content-Type: application/x-www-form-urlencoded POST requests to Ivanti Sentry admin interfaces containing URL-encoded XML structures with <commandexec>, <index>, and <reqandres> tags, which are characteristic of the PoC exploit payload.
  • Active exploitation is confirmed in the wild with backdooring of exposed Sentry instances. Treat any unpatched Ivanti Sentry instance as likely compromised and conduct forensic triage per CISA BOD 26-04 guidance.
  • The public PoC exploit is hosted at https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523 — use this to fingerprint exploit tooling signatures in network traffic or endpoint telemetry.
  • ·Exploitation is only possible when the Sentry appliance is in an unmanaged state with its endpoints externally reachable. Deployments using mTLS with EPMM or restricted HTTPS access through Neurons for MDM are not externally accessible to attackers.
  • ·Shadowserver's count of exposed Sentry instances is likely an undercount because many Ivanti Sentry instances block its scanner, meaning actual exposure and compromise rates are higher than reported numbers suggest.

CVSS provenance

nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
vulncheck10.0CRITICAL
cisa10.0CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.