More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)
MentionsIvanti
Today, Ivanti published an advisory. “No way?” we hear you say. "Yes way!" Today’s advisory outlines two vulnerabilities in Ivanti’s Sentry product, appealing directly to our inner desire for sophisticated server-side, pre-authenticated vulnerabilities. CVE-2026-10520 An OS Command Injection
Summary from watchTowr Labs.
Explained
The technology and terms in this story. Learn more
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.