CVE-2026-10520 CISA KEV · Actively exploitedSuited to automated attack · CISA
OS command injection in Ivanti Sentry
CVSS score
10.0
EPSS probability
%99.9
Risk score
20.0
Published
4 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Exploit for CVE-2026-10520 | Ivanti Sentry - OS Command Injection
Makefile Go / Python
imbas007/RCE-CVE-2026-10520-CVE-2026-10523
Makefile Go / Python
GitHub
Root-Level RCE via OS Command Injection in Ivanti Sentry
Makefile Go / Python
watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523
Makefile Go / Python
Nuclei: Ivanti Sentry - OS Command Injection
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2023-35078 Actively exploitedVulnerability in Ivanti Endpoint Manager Mobile
Workaround Public Exploits:8EPSS %100
9.8
CVE-2021-44529 Actively exploitedCode injection in N/a Ivanti EPM
Patch verified Public Exploits:4EPSS %99
9.8
CVE-2026-1281 Actively exploitedCode injection in Ivanti Endpoint Manager Mobile
Workaround Public Exploits:1EPSS %99
9.1
CVE-2024-21887 Actively exploitedVulnerability in Ivanti ICS
Patch status unknown Public Exploits:6EPSS %100
9.0
CVE-2025-22457 Actively exploitedVulnerability in Ivanti Connect Secure
Patch status unknown Public Exploits:5EPSS %100
9.0
CVE-2025-0282 Actively exploitedVulnerability in Ivanti Connect Secure
Workaround Public Exploits:5EPSS %100
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-10520"