Outbreak Alert Ivanti Sentry OS Command Injection Vulnerability Released: Jul 07, 2026 Download PDF » Share Ivanti Sentry OS Command Injection Vulnerability Tags High Severity Ivanti Vendor Share Subscribe Overview Analysis Solutions Threat Intelligence References Subscribe Overview Analysis Solutions Threat Intelligence References Actively Exploited Ivanti Sentry Flaw Enables Unauthenticated Root RCE FortiGuard Labs continues to observe exploitation attempts targeting CVE-2026-10520 following the public release of technical details and proof-of-concept (PoC) exploit code. At the time of publication, FortiGuard telemetry recorded 886 blocked attempts in the last 24 hours and 8,406 over the past 7 days, with weekly activity increasing by 82%. The Technology, Automotive, Banking/Finance/Insurance, and Education sectors remain among the most targeted. Learn More » Common Vulnerabilities and Exposures CVE-2026-10520 CVE-2026-10523 Background CVE-2026-10520 is a critical vulnerability affecting Ivanti Sentry that allows remote, unauthenticated attackers to execute arbitrary operating system commands with root privileges. The flaw stems from improper handling of internal configuration commands exposed through an externally accessible API, enabling complete device compromise without valid credentials. Shortly after disclosure, watchTowr published a detailed technical analysis and public PoC, significantly lowering the barrier to exploitation and increasing the likelihood of opportunistic attacks. Ivanti Sentry is an enterprise mobile gateway that provides secure access to corporate email, applications, and content for managed mobile devices. Organizations with internet-exposed Ivanti Sentry appliances should prioritize patching immediately, as attackers are actively attempting to exploit vulnerable systems. CVE-2026-10523 is included as part of the same security update but is not currently known to be exploited. Click here to analyze the Real-Time Threat Map Latest Development Recent news and incidents related to cybersecurity threats encompassing various events such as data breaches, cyber-attacks, security incidents, and vulnerabilities discovered. Upgrade Ivanti Sentry to 10.5.2, 10.6.2, 10.7.1, or later and restrict access to Sentry management and service interfaces from untrusted networks. June 11, 2026: The Cybersecurity and Infrastructure Security Agency added CVE-2026-10520 to its Known Exploited Vulnerabilities (KEV) Catalog, confirming active exploitation in the wild. June 10, 2026: watchTowr published a technical analysis and proof-of-concept (PoC) exploit for CVE-2026-10520, lowering the barrier to exploitation. https://labs.watchtowr.com/more-evidence-that-words-dont-mean-what-we-thought-they-meant-ivanti-sentry-pre-auth-os-command-injection-cve-2026-10520/ June 09, 2026: Ivanti released security updates and disclosed CVE-2026-10520 (OS Command Injection) and CVE-2026-10523 (Authentication Bypass). https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US FortiGuard Cybersecurity Framework Mitigate security threats and vulnerabilities by leveraging the range of FortiGuard Services. PROTECT IPS DETECT IOC Outbreak Detection RESPOND Automated Response Assisted Response Services RECOVER NOC/SOC Training End-User Training IDENTIFY Attack Surface Hardening IPS Detects and blocks attack attempts leveraging the vulnerability FortiADC DB 36.249 FortiGate DB 36.249 FortiNDR DB 36.249 FortiNDR Cloud DB 36.249 FortiProxy DB 36.249 FortiSASE DB 36.249 IOC FortiAnalyzer FortiCloud SOCaaS FortiSIEM FortiSOAR Outbreak Detection FortiAnalyzer DB 2.00099 Automated Response Services that can automaticlly respond to this outbreak. FortiXDR Assisted Response Services Experts to assist you with analysis, containment and response activities. Incident Response NOC/SOC Training Train your network and security professionals and optimize your incident response to stay on top of the cyberattacks. NSE Training Response Readiness End-User Training Raise security awareness to your employees that are continuously being targeted by phishing, drive-by download and other forms of cyberattacks. Security Awareness & Training Attack Surface Hardening Check Security Fabric devices to build actionable configuration recommendations and key indicators. Security Rating Threat Intelligence Information gathered from analyzing ongoing cybersecurity events including threat actors, their tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), malware and related vulnerabilities. ✖ References Sources of information in support and relation to this Outbreak and vendor. FortiGuard Threat Signal Learn More » About FortiGuard Outbreak Alerts Learn More »