Ivanti Sentry: Ivanti Sentry OS Command Injection Vulnerability
› Ivanti Sentry
Get an email when a new major security incident drops. No spam, unsubscribe any time.
- started
- Jun 11, 2026
- closed
- Jun 11, 2026
- CVEs
- 1
- sources
- 3
## summary
Ivanti Sentry (formerly known as MobileIron Sentry) contains an OS command injection vulnerability which could allow a remote unauthenticated user to achieve root-level remote code execution. This vulnerability can be successfully exploited in cases where the Sentry appliance is in an unmanaged state with its endpoints externally reachable. The use of mTLS with EPMM or restricted HTTPS access through Neurons for MDM makes interfaces inaccessible to external actors. Added to CISA KEV on 2026-06-11.
severity: Actively exploited (CISA KEV)
## cve ids[1]
## affected
- See vendor advisory / CISA notes (versions not always listed in KEV feed)
## fixed in
- See vendor advisory linked in sources
## timeline[1]
CISA added CVE-2026-10520 to the KEV catalog (due 2026-06-14).
## advisories[3]
## notes & caveats
Derived from CISA KEV JSON feed catalogVersion 2026.10.21. Exact affected/fixed version strings are not always in the KEV record — verify against the vendor advisory URL. startedAt uses dateAdded (exploitation may have begun earlier).
