Database/Control plane, storage & DevOps
Ivanti Sentry: OS command injection
CVE-2026-10520Control plane, storage & DevOpsKnown exploitedcurated
Impact
[KEV] OS command injection -> unauthenticated root-level remote code execution
Who can reach it
Network (remote)
What to do
Control-plane: patch to R10.5.2/R10.6.2/R10.7.1; rebuild the appliance if it was exposed
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.