Ivanti has patched two critical vulnerabilities (CVE-2026-10520, CVSS 10.0, and CVE-2026-10523, CVSS 9.9) in its Sentry security gateway, with CVE-2026-10520 allowing for root-level remote code execution. While not yet actively exploited, technical details for CVE-2026-10520 have been publicly released, increasing the risk of weaponization. Customers are urged to apply the provided patches immediately.
Ivanti has patched two critical vulnerabilities (CVE-2026-10520 and CVE-2026-10523) in Ivanti Sentry and has urged customers to implement the fix right away. Though the vulnerabilities are not known to be actively exploited, security researchers have already released technical details about the former, which may be used by attackers to craft a working exploit. About Ivanty Sentry and the vulnerabilities Ivanti Sentry is a security gateway that acts as a gatekeeper between mobile devices outside of … More → The post Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) appeared first on Help Net Security .