Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Critical Vulnerabilities in Ivanti Sentry Allows Code Execution as Root (CVE-2026-10520 & CVE-2026-10523)
Excerpt
The cause of the flaw has at the time of writing not been shared by the vendor. CVE-2026-10520: An OS command injection vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands with root privileges on affected devices. CVE-2026-10523: An authentication bypass vulnerability that allows a remote unauthenticated attacker to create arbitrary administrative accounts and gain full administrative access A proof-of-concept exploit is available to the…
Read the original report →Attack Flow6 steps · MITRE ATT&CK mapped
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2026-10520 | Medium | Score 54/100 | First seen |
| CVE | CVE-2026-10523 | Medium | Score 54/100 | First seen |
IOC Relationship Graph
Building graph…