Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release

Threat actors have begun actively exploiting a critical Ivanti Sentry command injection vulnerability just days after a proof-of-concept (PoC) exploit was made public, according to new internet scanning data from the Shadowserver Foundation. The flaw, tracked as CVE-2026-10520, carries a maximum CVSS score of 10.0 and allows remote, unauthenticated attackers to achieve root-level remote code […]

The post Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release appeared first on Cyber Security News.

This article has been indexed from Cyber Security News

Read the original article: