CVE-2026-10520 — Ivanti Sentry | Root RCE on Unmanaged Appliances | ThreatCast #Shorts

Ivanti Sentry (formerly MobileIron Sentry) contains an OS command injection vulnerability (CWE-78) that allows remote unauthenticated root-level remote code execution when the appliance is unmanaged and externally reachable. CISA added this to the Known Exploited Vulnerabilities catalog on 2026-06-11 with a remediation due date of 2026-06-14. Mitigation requires following vendor guidance and BOD 26-04 risk-based patching rules. Patch advisory: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US
Sources: NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-10520

#Shorts #Cybersecurity #CVE

Видео CVE-2026-10520 — Ivanti Sentry | Root RCE on Unmanaged Appliances | ThreatCast #Shorts канала Threat Cast