ivanti

a perfect 10: the Ivanti Sentry bug that hands an anonymous attacker root, and it's already being backdoored

CVE-2026-10520 scores a maximum 10.0 — the rarest severity rating there is. No login, one network request, and an attacker owns the box as root. It's on CISA's exploited list, with public exploit code and confirmed backdoors.

Priya Nair · 3h ago · 7 min