sign in--:--:--UTC

CVE-2026-10520

exploited in the wild☆ pin

CVSS

10.0

Reports

10

First seen

Jun 10, 2026

Last seen

Jul 2, 2026

Affected product

Ivanti Sentry

Recent reports

ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

The Hacker NewsJul 2, 2026 High

ChocoPoc malware delivered via trojanized exploits on GitHub

Bleeping ComputerJul 1, 2026 High

ChocoPoC malware targets cybersecurity researchers via trojanized GitHub PoC exploits

Bleeping ComputerJul 1, 2026 Critical

Ivanti Sentry High-Risk Vulnerabilities CVE-2026-10520 and CVE-2026-10523 – Urgent Patching Required

NICS TaiwanJun 18, 2026 Critical

CISA Orders Federal Agencies to Patch Actively Exploited Ivanti Sentry Vulnerability by Sunday

Bleeping ComputerJun 12, 2026 High

CISA Adds CVE-2026-10520 Ivanti Sentry OS Command Injection to Known Exploited Vulnerabilities Catalog

CISA AdvisoriesJun 11, 2026 Critical

Max severity Ivanti Sentry vulnerability now exploited in attacks

Bleeping ComputerJun 11, 2026 Critical

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

The Hacker NewsJun 10, 2026 Critical

Critical vulnerabilities in Ivanti Sentry (CVE-2026-10520, CVE-2026-10523)

CERT-EU AdvisoriesJun 10, 2026 Critical

Ivanti Sentry: Maximum-Severity RCE and Authentication Bypass Vulnerabilities Patched

Bleeping ComputerJun 10, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans