Ivanti Sentry Pre-Authenticated OS Command Injection Vulnerability | 

Ivanti Sentry contains a critical pre-authenticated OS command injection vulnerability, tracked as CVE-2026-10520, that allows unauthenticated remote attackers to execute arbitrary operating system commands as root on vulnerable appliances. The flaw exists in the /mics/api/v2/sentry/mics-config/handleMessage endpoint, which processes user-supplied XML messages without proper authentication or input validation. A public proof-of-concept was released on June 10, 2026, increasing the likelihood of exploitation. Affected versions include Ivanti Sentry prior to R10.5.2, R10.6.2, and R10.7.1.

What it is and why it matters

Ivanti Sentry serves as a gateway between mobile devices and enterprise resources, commonly providing secure access to Microsoft Exchange and other internal applications. According to Ivanti’s advisory, an unauthenticated attacker can submit a crafted commandexec XML payload to the vulnerable endpoint and trigger arbitrary command execution with root privileges.

This vulnerability is particularly concerning because:

• No authentication is required.
• Successful exploitation results in root-level code execution.
• Sentry is commonly deployed at the network edge.
• Compromise can provide attackers a pathway into internal enterprise systems.
• A public proof-of-concept is already available.
• The vulnerability has been assigned a CVSS score of 10.0.

Organizations using Ivanti Endpoint Manager Mobile (EPMM) alongside Sentry face elevated risk because compromise of the gateway can undermine downstream access controls and expose connected enterprise resources.

Stop Guessing, Start Proving