Critical Alert 1 Active Exploit Detected Today

CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability →
Powered by CVE Watchtower
×

CVE Watchtower


← Back to CVE List

CVE-2025-49152NVD

Vulnerability Summary

The affected products contain JSON Web Tokens (JWT) that do not expire, which could allow an attacker to gain access to the system.
Severity Level
HIGH(8.7)
Published Date
Jun 25, 2025
Last Modified
Jul 17, 2025
Exploitation Status
????
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone