PT-2026-47806 · Ivanti · Sentry

Published 2026-06-09 · Updated 2026-06-09 · CVE-2026-10520

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Sentry versions prior to R10.5.2 Ivanti Sentry versions prior to R10.6.2 Ivanti Sentry versions prior to R10.7.1

Description An OS Command Injection issue allows a remote unauthenticated user to achieve root-level remote code execution. OS Command Injection is a flaw where an application executes arbitrary operating system commands via a vulnerable input.

Recommendations Update to version R10.5.2. Update to version R10.6.2. Update to version R10.7.1.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2026-10520

Affected Products

Sentry

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-10520 · Security Note
• https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US · Note
• https://twitter.com/KaitanSecurity/status/2064384535425401125 · Twitter Post