CVE-2026-10520: listed in the CISA KEV catalog CVE-2026-10520 · CVSS 10.0 CRITICAL · KEV 2026-06-11
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
Is CVE-2026-10520 exploited? Listed in the CISA KEV catalog on 2026-06-11. Federal remediation due 2026-06-14. Past that date by 62 days. Public exploit code: none found in monitored sources. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2026-10520 Primary sources What this record does not say No EPSS score. No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-11.
CVE-2026-10520: listed in the CISA KEV catalog CVE-2026-10520 · CVSS 10.0 CRITICAL · KEV 2026-06-11
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
Is CVE-2026-10520 exploited? Listed in the CISA KEV catalog on 2026-06-11. Federal remediation due 2026-06-14. Past that date by 62 days. Public exploit code: none found in monitored sources. Public detection rules exist. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2026-10520 Primary sources What this record does not say No EPSS score. No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-11.