Tag: cve 2026 10520
3 articles
CISA Mandates Patching of Actively Exploited Ivanti Flaw
Federal agencies are on high alert: a severe vulnerability in Ivanti's Sentry gateway, already exploited by attackers, must be patched within three days to prevent further backdoor attacks. CISA's urgent directive demands swift action to secure vulnerable devices and shield against malicious cyber threats.
Ivanti Sentry vulnerability exploited in attacks
Within 24 hours of Ivanti releasing a patch for a high-severity vulnerability in its Sentry software, attackers began exploiting it in real-world attacks, with a large number of exploitation attempts detected. The flaw, tracked as CVE-2026-10520, allows hackers to execute code with root privileges on vulnerable mobile gateways.
Ivanti Patches Zero-Day Flaw Allowing Root Code Execution
Ivanti has patched a high-risk zero-day flaw that could let hackers run malicious code with root access, and fortunately, there are no known cases of exploitation so far. The vulnerability, tracked as CVE-2026-10520, affects the company's Sentry secure mobile gateway and allows for OS command injection permitting root execution.