CVE-2026-10520: CRITICAL (CVSS 10.0), Actively Exploited (CISA KEV)

CRITICAL (CVSS 10.0), Actively Exploited (CISA KEV), EPSS 98.9%. An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution