Description
Ivanti Sentry 在 R10.5.2、R10.6.2 和 R10.7.1 之前版本中存在操作系统命令注入漏洞，允许远程未授权用户实现 root级别的远程代码执行
Ivanti Sentry存在操作系统命令注入漏洞(CVE-2026-10520)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2026-10520
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US
https://labs.watchtowr.com/more-evidence-that-words-dont-mean-what-we-thought-they-meant-ivanti-sentry-pre-auth-os-command-injection-cve-2026-10520/
https://www.helpnetsecurity.com/2026/06/10/ivanti-sentry-cve-2026-10520-cve-2026-10523/
https://www.tenable.com/cve/CVE-2026-10520
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520
https://www.rapid7.com/blog/post/etr-cve-2026-10520-cve-2026-10523-multiple-critical-vulnerabilities-affecting-ivanti-sentry/
https://www.fisac.tw/