CVE-2026-10520

LLM-synthesized narrative grounded in this CVE's description and references.

• Ivanti/Standalone Sentry2 versions

  cpe:2.3:a:ivanti:standalone_sentry:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:ivanti:standalone_sentry:*:*:*:*:*:*:*:*range: <10.5.2
  • cpe:2.3:a:ivanti:standalone_sentry:10.7.0:*:*:*:*:*:*:*
• Ivanti/Ivanti Sentryllm-create

  Range: <R10.5.2, <R10.6.2, <R10.7.1
• Watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523llm-create

• hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523nvdPatchVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers
  Help Net Security · Oct 8, 2026
• Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
  The Register Security · Oct 7, 2026
• Remediating Vulnerabilities With LLMs: Inside Ivanti's Automation Push
  Dark Reading · Jul 20, 2026
• New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
  The Hacker News · Jul 2, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub
  BleepingComputer · Jul 1, 2026
• New ChocoPoC malware targets researchers via trojanized PoC exploits
  BleepingComputer · Jul 1, 2026
• ⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
  The Hacker News · Jun 15, 2026
• Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack
  Help Net Security · Jun 14, 2026
• Ivanti Sentry Exploitation Attempts Hitting Honeypots
  SecurityWeek · Jun 12, 2026
• CISA orders feds to patch actively exploited Ivanti flaw by Sunday
  BleepingComputer · Jun 12, 2026
• Max-Severity Ivanti Flaw Exploited 24 Hours After Disclosure
  Dark Reading · Jun 11, 2026
• Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release
  Cyber Security News · Jun 11, 2026
• Max severity Ivanti Sentry vulnerability now exploited in attacks
  BleepingComputer · Jun 11, 2026
• Ivanti: Actively-Exploited Flaw CVE-2026-10520 Added to CISA KEV
  Vypr Intelligence · Jun 11, 2026
• Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
  The Hacker News · Jun 10, 2026
• Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)
  Help Net Security · Jun 10, 2026
• Ivanti tells Sentry customers to patch now as critical bugs hit 10.0 and 9.9
  The Register Security · Jun 10, 2026
• CVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry
  Rapid7 Blog · Jun 10, 2026
• Critical Vulnerabilities Patched in Fortinet, Ivanti Products
  SecurityWeek · Jun 10, 2026
• Ivanti: Max severity Sentry flaw allows code execution as root
  BleepingComputer · Jun 10, 2026
• More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)
  watchTowr Labs · Jun 10, 2026
• CISA Adds One Known Exploited Vulnerability to Catalog
  CISA Alerts