Exploit for CVE-2026-10520 CVE-2026-10523 CVE-2026-10520

cve · 2026-06-09

Description

Ivanti Sentry OS command injection before versions R10.5.2, R10.6.2, and R10.7.1 permits remote unauthenticated root code execution.

Entry point

Parametermessage · request body

Pathmics/api/v2/sentry/mics-config/handleMessage

Unauthenticated OS command injection via MICS handleMessage endpoint (XML-wrapped commands via URL-encoded message in POST body)

Affected Ivanti Standalone Sentry versions

Ivanti Standalone Sentry< 10.5.2, 10.6.2, 10.7.0

All known vulnerabilities by product

CVSS Score

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-08-05

CVE Information

References

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-10520

https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

Exploit Details

Modified:2026-07-23 08:10

Last Seen:2026-07-23 08:50

Reporter:ivanti

Tags

Ivanti SentryCommand injectionRemote code executionRoot accessVersion R10.5.2Version R10.6.2Version R10.7.1

Other exploits for the same CVE

Exploit for OS Command Injection in Ivanti Standalone_Sentry

2026-07-01 emilliewatson96GITHUB

Exploit for OS Command Injection in Ivanti Standalone_Sentry

2026-06-18 error-insideGITHUB

Ivanti Sentry handleMessage authentication bypass and command execution

2026-06-11 SAINT CorporationSAINT

Ivanti Sentry handleMessage authentication bypass and command execution

2026-06-11 SAINT CorporationSAINT

Exploit for CVE-2026-10520

2026-06-10 ogenichGITHUB

Exploit for CVE-2026-10520

2026-06-09 watchtowrlabsGITHUB

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-10520
An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution