#cve-2026-10520

Analysis · Jun 18, 2026 · Colten Anderson

Patching Ivanti Sentry Closes the Door. It Doesn't Evict the Guest.

Shadowserver found backdoored Ivanti Sentry instances within 48 hours of the PoC and said the rest are most likely compromised. The patch is step one, not the answer.