Exploit for spryCVE-2026-10520

kitploit · 2026-08-25

Description

Vulnerability CVE-2026-10520 in spry, a tools component.

Entry point

Parametermessage · request body

Path/mics/api/v2/sentry/mics-config/handleMessage

Unauthenticated OS command injection via MICS API handleMessage endpoint.

Affected Ivanti Standalone Sentry versions

Ivanti Standalone Sentry< 10.5.2, 10.6.2, 10.7.0

All known vulnerabilities by product

Sentry

CVSS 10.0 for CVE-2026-10520

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-08-27

CVE Information

CVE-2026-10520

Exploit Details

Modified:2026-08-25 06:27

Last Seen:2026-08-26 10:05

Reporter:KitPloit

Other exploits for CVE-2026-10520

watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

2026-08-27 KitPloitKITPLOIT

CVE-2026-5027-Langflow

2026-08-27 KitPloitKITPLOIT

CVE-2026-10520-10523

2026-08-27 KitPloitKITPLOIT

CVE-2026-10523-Ivanti-sentry

2026-08-26 KitPloitKITPLOIT

CVE-2026-10520

2026-08-26 KitPloitKITPLOIT

CVE-2026-10520

2026-08-25 KitPloitKITPLOIT

RCE-CVE-2026-10520-CVE-2026-10523

2026-08-25 KitPloitKITPLOIT

patch-CVE-2026-10520

2026-08-25 KitPloitKITPLOIT

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-EMILLIEWATSON96-SPRYCVE-2026-10520
# spryCVE-2026-10520

Exploit Code

Share

Share on social media: