CVE-2026-10520Published
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-10520 · Microsoft / collected KEV context
cve-program · CVE-2026-10520
Related operational evidence
Explicit CVE identifiers- WAF - WAF Release - 2026-06-23 · Security advisory · 23 Jun 2026