VulnerabilityBleeping Computer
10.0 — CRITICAL
Max severity Ivanti Sentry vulnerability now exploited in attacks
Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Attackers are exploiting a maximum-severity vulnerability in Ivanti Sentry, allowing them to execute code with root privileges on Internet-exposed secure mobile gateways, potentially enabling the theft of sensitive customer and corporate data.
⚙️Technical Details
Affected Systems
Ivanti Sentry
Attack Vectors
NETWORK
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Customers using Ivanti Sentry with unpatched versions R10.5.2, R10.6.2, and R10.7.1
🛡️Recommended Actions
1Patch Ivanti Sentry with the latest available version (R10.8.0) as soon as possible.
2Disable Internet access to secure mobile gateways until patched.
3Monitor for suspicious activity and implement additional security controls.
📦Affected Products
Ivanti Sentry
🔐NVD Verified DataVERIFIED
CVE-2026-10520 ↗CVSS 10 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HWeaknesses
CWE-78
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.