Max severity Ivanti Sentry vulnerability now exploited in attacks

Ivanti Sentry (formerly MobileIron Sentry) is affected by a maximum-severity OS command injection vulnerability (CVE-2026-10520) that allows remote code execution with root privileges; Ivanti released patches in Sentry R10.5.2, R10.6.2, and R10.7.1. Although Ivanti initially reported no known exploitation at disclosure, Shadowserver observed exploitation and multiple backdoored Internet-exposed Sentry instances, warning that unpatched systems are likely compromised.