CVE-2026-10520

The vulnerability consists of improper sanitization of input data passed to system calls (CWE-78 — OS Command Injection). An attacker can craft an appropriate network request and inject malicious system commands that will be executed by the server without requiring any credentials. The attack scope extends beyond the application context itself (scope changed), which means the ability to impact other system components.

An attacker gains remote code execution (RCE) with root privileges on the vulnerable device, which means complete system takeover, access to sensitive data, ability to modify configuration, and potential use of the server as a launch point for further attacks on the internal network.

Ivanti Sentry must be immediately updated to version R10.5.2, R10.6.2, or R10.7.1 (depending on the branch in use). Detailed instructions are available in the official security bulletin from the vendor at the address indicated in the references. Until the patch is deployed, it is recommended to restrict network access to Ivanti Sentry management interfaces only to trusted IP addresses.

Ivanti Sentry in all versions prior to R10.5.2, R10.6.2, and R10.7.1

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. This vulnerability can be successfully exploited in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors.