Ivanti Sentry CVE-2026-10520: Quick Look at a CVSS 10.0 Unauthenticated Root RCE via OS Command Injection

Introduction

A maximum severity OS command injection in Ivanti Sentry gives any remote, unauthenticated attacker full root-level code execution on the appliance, earning a perfect CVSS score of 10.0. For organizations that deploy Sentry as an inline gateway between mobile devices and backend corporate systems, this vulnerability hands over the keys to a critical network chokepoint without a single credential.

Ivanti Sentry (formerly MobileIron Sentry) is an inline application gateway that tunnels traffic and data between mobile devices and corporate backend systems. It is usually deployed alongside Ivanti Endpoint Manager Mobile (EPMM) as part of the Ivanti Unified Endpoint Management platform, serving enterprises that need to secure mobile access to internal resources. Ivanti acquired MobileIron for $872 million in 2020, and Sentry inherited the MobileIron codebase. That detail matters when you examine the recurring vulnerability patterns in this product line.

Technical Information

Vulnerability Classification

CVE-2026-10520 is classified under CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'). The NVD description states:

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution.

The CVSS score of 10.0 is the maximum possible, which implies a network attack vector, low attack complexity, no privileges required, no user interaction, and complete impact across confidentiality, integrity, and availability. As of June 9, 2026, the NVD has not published a formal CVSS vector string; the assessment is listed as "NVD assessment not yet provided."

Ivanti Sentry Architecture and Attack Surface

Ivanti Sentry exposes management interfaces on ports 8443 (MICS portal) and 8433 (System Manager Portal), both of which have served as attack surfaces in prior vulnerabilities. The product runs as a standalone appliance and processes traffic inline between mobile endpoints and enterprise backends, which makes it both network reachable and operationally critical.

Root Cause and Historical Precedent

The specific vulnerable endpoint for CVE-2026-10520 has not been publicly detailed beyond the NVD description, but the vulnerability class and product history give strong context. The most instructive precedent is CVE-2023-38035, a prior critical RCE in Ivanti Sentry documented by Synacktiv. In that vulnerability, the MICSLogService Hessian service exposed the uploadFileUsingFileInput method, which could be called anonymously on the MICS portal (accessible on port 8443 at /mics/services/MICSLogService). The method accepted a SystemCommandRequestDTO object containing a command field that was passed directly to Runtime.getRuntime().exec(cmd) with no sanitization:

public synchronized JSONObject uploadFileUsingFileInput(
    final SystemCommandRequestDTO requestDTO, ServletContext servletContext) {
    try {
        String cmd = requestDTO.getCommand();
        Runtime rt = Runtime.getRuntime();
        Process proc = rt.exec(cmd);
        String fname = requestDTO.getInputFile();
        file = new RandomAccessFile(fname, "r");

The SystemCommandRequestDTO also exposed a setRoot(true) method. Synacktiv demonstrated exploitation by crafting a Hessian2 serialized payload, sending it via HTTP POST with Content-Type: application/x-hessian, and getting command execution as the tomcat2 user (uid=497). The proof of concept showed the attacker writing a JSP webshell to the appliance's web application directory:

$ curl -ski -H 'Content-Type: application/x-hessian' --data-binary @payload \
  "https://sentry.local:8443/mics/services/MICSLogService"
HTTP/1.1 200 [...]

$ curl -sk https://sentry.local:8443/mics/css/css.jsp -H 'WS: cat /mi/release;id'
Sentry Standalone 9.18.0 Build 6
uid=497(tomcat2) gid=102(tomcat) groups=102(tomcat)

Key Differences from CVE-2023-38035

CVE-2026-10520 differs from the 2023 flaw in two important ways. First, it grants root level execution rather than the tomcat2 service account. Second, it affects the R10.x branch (versions before R10.5.2, R10.6.2, and R10.7.1), whereas CVE-2023-38035 affected versions 9.18.0 and below. OS Command Injection (CWE-78) recurring in the same product family across major version branches suggests a systemic gap in input validation across Sentry's administrative and management interfaces, rather than an isolated coding error.

Paired Vulnerability: CVE-2026-10523

The Ivanti advisory covers both CVE-2026-10520 and CVE-2026-10523 together. The companion vulnerability has no public description yet, and its relationship to CVE-2026-10520 is unknown: it may be a chainable flaw, a separate issue in a different component, or a variant. Defenders should address both CVEs at the same time.

Summary Table

Affected Systems and Versions

The vulnerability affects Ivanti Sentry across three concurrent release branches:

• All versions before R10.5.2 in the R10.5.x branch
• All versions before R10.6.2 in the R10.6.x branch
• All versions before R10.7.1 in the R10.7.x branch

The three separate fixed versions tell you that Ivanti maintains at least three concurrent release branches for Sentry, and the vulnerable code was present in all three before patching. Verify your exact Sentry release number against all three patched versions. A recent deployment is not necessarily safe.

The fixed versions are R10.5.2, R10.6.2, and R10.7.1.

Vendor Security History

Ivanti's security track record, particularly for products inherited from the MobileIron acquisition, shows a sustained pattern of critical vulnerabilities. Several have been confirmed as actively exploited in the wild, with CISA adding them to the Known Exploited Vulnerabilities catalog.

CWE-78 OS Command Injection recurring in Sentry across multiple version branches raises a question: has the codebase's input validation actually improved since the MobileIron acquisition?

Threat Actor Interest in Ivanti Products

The threat intelligence context for this vulnerability is significant:

China nexus threat actors have been observed exploiting Ivanti EPMM vulnerabilities (CVE-2025-4428) for initial access, as documented by EclecticIQ analysts.

Initial Access Brokers and cryptomining operators targeted the prior Sentry flaw CVE-2023-38035 within days of disclosure. Darktrace documented post exploitation activity that included internal network reconnaissance using Responder for LLMNR poisoning, port scanning with ncat and TxPortMap, and cryptocurrency mining via Kinsing malware and Monero miners.

Rapid weaponization has been the norm for Ivanti EPMM flaws in 2026. Unit42 reported widespread exploitation of CVE-2026-1281 and CVE-2026-1340, with attackers deploying web shells. CVE-2026-6973 was exploited as a zero day before the patch was publicly available.

Indicators of Compromise from Prior Sentry Exploitation

Based on the Darktrace analysis of CVE-2023-38035 exploitation, organizations should monitor for the following patterns, which may indicate exploitation of CVE-2026-10520 or similar Sentry flaws:

Recommended Compensating Controls

While patches are being staged, apply the following compensating controls:

1. Network Isolation: Restrict access to Ivanti Sentry management interfaces (ports 8443 and 8433) to trusted administrative networks only. Do not expose these ports to the internet.
2. VPN with MFA: If Sentry management must be reached remotely, require VPN access with multi factor authentication before allowing connections to the management portal.
3. WAF Rules: Deploy web application firewall rules to block Hessian serialization payloads (Content-Type: application/x-hessian) targeting the /mics/services/MICSLogService endpoint, based on the attack pattern observed in CVE-2023-38035.
4. Behavioral Monitoring: Monitor for unexpected outbound connections from Sentry appliances, especially to cryptocurrency mining pools, OOB testing domains, and known malware infrastructure.

Given the CVSS 10.0 severity, unauthenticated root access, and the well documented pattern of rapid weaponization of Ivanti vulnerabilities by both state sponsored and criminal threat actors, the probability of imminent exploitation of CVE-2026-10520 is very high. Treat patching as an emergency priority.

References

• NVD: CVE-2026-10520
• Ivanti Security Advisory: CVE-2026-10520 and CVE-2026-10523
• Synacktiv: Ivanti Sentry / MobileIron Sentry Unauthenticated Remote Code Execution
• Darktrace: Entry via Sentry, Analyzing the Exploitation of a Critical Vulnerability in Ivanti Sentry
• EclecticIQ: China Nexus Threat Actor Actively Exploiting Ivanti EPMM
• Unit42: Critical Vulnerabilities in Ivanti EPMM Exploited
• Help Net Security: Ivanti EPMM Zero Day CVE-2026-6973
• Ivanti: Sentry Secure Mobile Gateway Product Page
• GreyNoise: Active Ivanti Exploitation
• Hive Pro: Ivanti Patches Actively Exploited EPMM Flaws
• Quorum Cyber: Ivanti Discloses Multiple Critical Vulnerabilities
• CISA Known Exploited Vulnerabilities Catalog
• Wikipedia: Ivanti