Critical Alert 1 Active Exploit Detected Today

CVE-2026-10520 — Ivanti Sentry OS Command Injection Vulnerability →
Powered by CVE Watchtower
×
June 12, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-49153NVD

Vulnerability Summary

The affected products could allow an unauthenticated attacker to overwrite files and execute arbitrary code.
Severity Level
CRITICAL(9.3)
Published Date
Jun 25, 2025
Last Modified
Jul 17, 2025
Exploitation Status
????
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-22: Path Traversal β†—
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone

External References