{"metadata": {"vulnerability": "cve-2026-10523", "count": 65, "kinds": {"milestone": 8, "sighting": 37, "kev": 0, "other": 20}}, "data": [{"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0180", "record": "NCSC-2026-0180", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-01T08:57:47.470Z", "date_only": false, "value": "2026-06-01T08:57:47.470Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-10523", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": true, "value": "2026-06-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0724", "record": "CERTFR-2026-AVI-0724", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-10523", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-06-09T00:00:00Z", "date_only": false, "value": "2026-06-09T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10523", "record": "FKIE_CVE-2026-10523", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-06-09T08:30:20Z", "date_only": false, "value": "2026-06-09T08:30:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-567", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "c99f4720-0fc9-4207-adbd-05dd6dfcacd3", "url": "https://cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av26-567"}, {"timestamp": "2026-06-09T14:16:41.255Z", "date_only": false, "value": "2026-06-09T14:16:41.255Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-10523", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-06-09T14:17:40.240Z", "date_only": false, "value": "2026-06-09T14:17:40.240Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ivanti", "record": "cve-2026-10523", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-09T16:04:30.100Z", "date_only": false, "value": "2026-06-09T16:04:30.100537Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0180", "record": "NCSC-2026-0180", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T16:04:30.100Z", "date_only": false, "value": "2026-06-09T16:04:30.100537Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0180", "record": "NCSC-2026-0180", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-09T16:16:35Z", "date_only": false, "value": "2026-06-09T16:16:35Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8FC8-RW5J-9RCQ", "record": "GHSA-8FC8-RW5J-9RCQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-06-09T16:16:35.837Z", "date_only": false, "value": "2026-06-09T16:16:35.837", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10523", "record": "FKIE_CVE-2026-10523", "field": "published"}, {"timestamp": "2026-06-09T17:18:01.004Z", "date_only": false, "value": "2026-06-09T17:18:01.004574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnupbjfggb2x", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "d031079a-daf7-4354-95b4-3fc6c2057b30", "content": "CVE-2026-10523 - Ivanti Sentry Authentication Bypass\nCVE ID : CVE-2026-10523\n \n Published : June 9, 2026, 4:16 p.m. | 20\u00a0minutes ago\n \n Description : An Authentication Bypass vulnerability (CWE-288)\u00a0in Ivanti\u00a0Sentry before the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allows\u00a0a rem...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnupbjfggb2x"}, {"timestamp": "2026-06-09T17:28:39.141Z", "date_only": false, "value": "2026-06-09T17:28:39.141855Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnupudp66z2h", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "7b195637-297b-4e47-b0c6-827f38bf7c9b", "content": "Ivanti Sentry R10.5.2\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u8106\u5f31\u6027\u3002\u9060\u9694\u306e\u653b\u6483\u8005\u306f\u3001\u7ba1\u7406\u8005\u6a29\u9650\u3092\u6301\u3064\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4e0d\u6b63\u306b\u4f5c\u6210\u3057\u3001\u30b7\u30b9\u30c6\u30e0\u3092\u5b8c\u5168\u306b\u5236\u5fa1\u3067\u304d\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-10523 CVSS 9.9 | CRITICAL", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mnupudp66z2h"}, {"timestamp": "2026-06-09T18:30:38Z", "date_only": false, "value": "2026-06-09T18:30:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8FC8-RW5J-9RCQ", "record": "GHSA-8FC8-RW5J-9RCQ", "field": "published"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1841", "record": "WID-SEC-W-2026-1841", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1841", "record": "WID-SEC-W-2026-1841", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-06-09T22:00:00Z", "date_only": false, "value": "2026-06-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1841", "record": "WID-SEC-W-2026-1841", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0724", "record": "CERTFR-2026-AVI-0724", "field": "last_revision_date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0724", "record": "CERTFR-2026-AVI-0724", "field": "initial_release_date"}, {"timestamp": "2026-06-10T00:00:00Z", "date_only": false, "value": "2026-06-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0724", "record": "CERTFR-2026-AVI-0724", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-10T02:18:20Z", "date_only": false, "value": "2026-06-10T02:18:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/ivanti-june-security-update-1", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "1fb40fca-5a73-4617-8043-d71399823b11", "url": "https://www.acn.gov.it/portale/w/ivanti-june-security-update-1"}, {"timestamp": "2026-06-10T03:58:55.720Z", "date_only": false, "value": "2026-06-10T03:58:55.720Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-10523", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-10T03:58:55.720Z", "date_only": false, "value": "2026-06-10T03:58:55.720Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-10523", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-10T04:00:31Z", "date_only": false, "value": "2026-06-10T04:00:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.ncsc.nl/alerts/verhoogde-kans-op-misbruik-van-ivanti-sentry-kwetsbaarheden", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "18842974-8133-479f-8274-f05b3bf97f62", "url": "https://www.ncsc.nl/alerts/verhoogde-kans-op-misbruik-van-ivanti-sentry-kwetsbaarheden"}, {"timestamp": "2026-06-10T04:44:07.374Z", "date_only": false, "value": "2026-06-10T04:44:07.374229Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/536dbd2e-9793-4c4b-bc54-a21fd7e60e65", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "5af73e0b-a880-4da7-b0d4-1c3f20c4b323", "url": "https://vulnerability.circl.lu/bundle/536dbd2e-9793-4c4b-bc54-a21fd7e60e65"}, {"timestamp": "2026-06-10T05:00:00Z", "date_only": false, "value": "2026-06-10T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "7100980c-2782-4a8b-86c2-6b0cc98be0de", "url": "https://www.cert.se/2026/06/patchtisdag-juni-2026-samlad-information-om-manadens-sakerhetsuppdateringar.html"}, {"timestamp": "2026-06-10T06:45:14.232Z", "date_only": false, "value": "2026-06-10T06:45:14.232406Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnw4exs6dr2l", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "9b1ee86d-8046-4ab7-b363-ca6c03dabb4a", "content": "Ivanti patched two critical Sentry flaws, including CVE-2026-10520, a max-severity command injection that could allow root code execution, and CVE-2026-10523, an auth bypass for rogue admin access. #Ivanti #Sentry #CVE202610520", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mnw4exs6dr2l"}, {"timestamp": "2026-06-10T08:46:08.491Z", "date_only": false, "value": "2026-06-10T08:46:08.491420Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0180", "record": "NCSC-2026-0180", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-10T11:06:36.734Z", "date_only": false, "value": "2026-06-10T11:06:36.734699Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mnwkyeuu2326", "record": "cve-2026-10523", "field": "creation_timestamp", "uuid": "ae0238cb-12c4-47a0-9c96-b4acd0e167dc", "content": "\ud83d\udea8 CISA KEV [CVSS 10.0 \u00b7 CRITICAL]\nCVE-2026-10520, CVE-2026-10523 - Multiple critical vulnerabilities affecting Ivanti Sentry\n\nhttps://www.rapid7.com/blog/post/etr-cve-2026-10520-cve-2026-10523-multiple-critical-vulnerabilities-affecting-ivanti-sentry\n\n#CISA #KEV #PatchNow", "url": "https://bsky.app/profile/aegisbot.bsky.social/post/3mnwkyeuu2326"}, {"timestamp": "2026-06-10T12:35:12.552Z", "date_only": false, "value": "2026-06-10T12:35:12.552724Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnwpws6bag2b", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "eb09ca24-d062-4395-abdf-ae2b887abb0d", "content": "~Certeu~\nIvanti Sentry vulnerabilities (CVE-2026-10520, CVE-2026-10523) allow unauthenticated RCE and admin access.\n-\nIOCs: CVE-2026-10520, CVE-2026-10523\n-\n#CVE202610520 #Ivanti #ThreatIntel", "url": "https://bsky.app/profile/boredchilada.bsky.social/post/3mnwpws6bag2b"}, {"timestamp": "2026-06-10T13:15:20.932Z", "date_only": false, "value": "2026-06-10T13:15:20.932611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6kyyvj2e", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "ce5528fa-2cd3-43ee-a490-b94d1b8222ab", "content": "\ud83d\udd17 CVE : CVE-2026-6973, CVE-2026-10520, CVE-2026-10520, CVE-2026-10523, CVE-2026-10727, CVE-2026-6973", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnws6kyyvj2e"}, {"timestamp": "2026-06-10T13:27:17.599Z", "date_only": false, "value": "2026-06-10T13:27:17.599571Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rapid7.com/post/3mnwstvzuss2g", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "10156cc9-4f92-4774-9881-ee0460beadf3", "content": "\ud83d\udea8 On June 9, 2026, #Ivanti published a security advisory for 2 critical vulnerabilities affecting Ivanti Sentry (FKA MobileIron Sentry).\n\nCVE-2026-10520 (CVSS 10.0) is an OS command injection vuln, and CVE-2026-10523 (CVSS 9.9) is an authentication bypass vuln.\n\nRead on: r-7.co/4arpQHd", "url": "https://bsky.app/profile/rapid7.com/post/3mnwstvzuss2g"}, {"timestamp": "2026-06-10T16:06:30.767Z", "date_only": false, "value": "2026-06-10T16:06:30.767481Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116726647250447781", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "1da1a54e-2043-41e6-923e-ce9481735b57", "content": "The Hacker News: Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities https://thehackernews.com/2026/06/ivanti-fortinet-and-sap-release-patches.html @thehackernews \nPosted yesterday: \nIvanti: Security Advisory Ivanti Sentry (CVE-2026-10520, CVE-2026-10523) https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523\nOnapsis: SAP Security Notes: June 2026 Patch Day https://onapsis.com/blog/sap-security-patch-day-june-2026/ $infosec #Ivanti #vulnerability", "url": "https://infosec.exchange/users/AAKL/statuses/116726647250447781"}, {"timestamp": "2026-06-10T20:35:23.999Z", "date_only": false, "value": "2026-06-10T20:35:23.999811Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mnxkrgqk6z2r", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "d889366d-8138-4e9d-8625-2a2ba0a11668", "content": "On June 9, 2026, Ivanti disclosed two critical vulnerabilities in Ivanti Sentry: CVE-2026-10520 (OS command injection, CVSS 10.0) and CVE-2026-10523 (authentication bypass, CVSS 9.9). Both allow remote unauthenticated attackers to execute commands and gain administrative access.", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mnxkrgqk6z2r"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1841", "record": "WID-SEC-W-2026-1841", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-06-10T22:00:00Z", "date_only": false, "value": "2026-06-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1841", "record": "WID-SEC-W-2026-1841", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-11T09:11:03Z", "date_only": false, "value": "2026-06-11T09:11:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0180", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "4b14a140-fff4-4e64-9838-5ba1469eea49", "content": "Ivanti heeft twee kwetsbaarheden verholpen in Sentry. De kwetsbaarheid met kenmerk CVE-2026-10520, waarvan Ivanti een CVSS-score van 10 heeft toegekend, kan een ongeauthenticeerde kwaadwillende op afstand in staat stellen willekeurige code uitvoeren met root rechten. De kwetsbaarheid met kenmerk CVE-2026-10523, die Ivanti een CVSS score van 9.9, heeft gegeven, kan door een ongeauthenticeerde kwaadwillende op afstand worden misbruikt om administratieve accounts aan te maken.\n\nMisbruik van deze kwetsbaarheden is mogelijk, maar de randvoorwaarden die nodig zijn om deze kwetsbaarheden op afstand uit te buiten, vereisen dat een managementpoort aan het internet is ontsloten. Deze randvoorwaarden zijn niet aanwezig in standaardimplementaties van Ivanti Sentry.\n\nDe kwetsbaarheden hebben Ivanti bereikt via responsible disclosure. Momenteel vindt er, voor zover bekend, geen actief misbruik van deze kwetsbaarheden plaats en is er geen publieke PoC code beschikbaar. Het NCSC verwacht echter dat dit op korte termijn zal veranderen.", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0180"}, {"timestamp": "2026-06-11T10:53:32.387Z", "date_only": false, "value": "2026-06-11T10:53:32.387132Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnz2pvprxk2h", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "2d7b5918-4109-4787-afbc-d0a9282f7308", "content": "Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)\n\nIvanti has patched two critical vulnerabilities (CVE-2026-10520 and CVE-2026-10523) in Ivanti Sentry and has urged customers to implement the fix right away. Though the vulnerabilities are not kn\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mnz2pvprxk2h"}, {"timestamp": "2026-06-11T11:06:01.474Z", "date_only": false, "value": "2026-06-11T11:06:01.474+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1841", "record": "WID-SEC-W-2026-1841", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-11T11:11:03.648Z", "date_only": false, "value": "2026-06-11T11:11:03.648275Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0180", "record": "NCSC-2026-0180", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-11T11:11:03.648Z", "date_only": false, "value": "2026-06-11T11:11:03.648275Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0180", "record": "NCSC-2026-0180", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-12T06:56:22Z", "date_only": false, "value": "2026-06-12T06:56:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://ccb.belgium.be/advisories/warning-critical-root-level-remote-code-execution-and-authentication-bypass", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "01d32a42-a801-4808-92e9-9d16abc6f92c", "url": "https://ccb.belgium.be/advisories/warning-critical-root-level-remote-code-execution-and-authentication-bypass"}, {"timestamp": "2026-06-13T06:40:43.862Z", "date_only": false, "value": "2026-06-13T06:40:43.862878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mo5njpbitq2w", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "7b3b4711-0bd7-4481-9d23-54246eb4efb9", "content": "Just when we thought we could have a quiet cup of tea, Ivanti drops CVE-2026-10520 and CVE-2026-10523 to remind us of our endless mortality. These stunning flaws allow unauthenticated freeloaders to gain root-level command execution or simply create administrative accounts to run...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mo5njpbitq2w"}, {"timestamp": "2026-06-13T20:16:54.894Z", "date_only": false, "value": "2026-06-13T20:16:54.894792Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mo733rilfs2s", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "42c18e15-2f31-4706-960d-71f2780f01b8", "content": "\ud83d\udee1\ufe0f Manual T\u00e9cnico de Mitigaci\u00f3n: Vulnerabilidades CVE-2026-10520 y CVE-2026-10523 en Ivanti Sentry www.newstecnicas.com/2026/06/manu...", "url": "https://bsky.app/profile/newstecnicas.com/post/3mo733rilfs2s"}, {"timestamp": "2026-06-14T11:14:10.119Z", "date_only": false, "value": "2026-06-14T11:14:10.119226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3moanazs5422y", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "fbf5aabd-f669-41cd-b85e-950e82af1c2f", "content": "\ud83d\udee1\ufe0f Manual T\u00e9cnico de Mitigaci\u00f3n: #Vulnerabilidades CVE-2026-10520 y CVE-2026-10523 en Ivanti Sentry www.newstecnicas.com/2026/06/manu...", "url": "https://bsky.app/profile/newstecnicas.com/post/3moanazs5422y"}, {"timestamp": "2026-06-18T17:13:12.755Z", "date_only": false, "value": "2026-06-18T17:13:12.755684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mold76bpv22p", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "5abbd62f-b46c-43ab-af29-ac0e749814cf", "content": "\ud83d\udee1\ufe0f Manual T\u00e9cnico de Mitigaci\u00f3n: #Vulnerabilidades CVE-2026-10520 y CVE-2026-10523 en Ivanti Sentry www.newstecnicas.com/2026/06/manu...", "url": "https://bsky.app/profile/newstecnicas.com/post/3mold76bpv22p"}, {"timestamp": "2026-06-22T21:30:45Z", "date_only": false, "value": "2026-06-22T21:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8FC8-RW5J-9RCQ", "record": "GHSA-8FC8-RW5J-9RCQ", "field": "modified"}, {"timestamp": "2026-06-22T23:17:00.920Z", "date_only": false, "value": "2026-06-22T23:17:00.920403Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3movzfimayj25", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "29e18c94-e412-4489-8350-ce249def4b3d", "content": "\ud83d\udea8  ALERT: CVE-2026-10523\n\nCVSS 9.9/10\n\n\ud83d\udccb WHAT IT IS:\nAn Authentication Bypass vulnerability (CWE-288)\u00a0in Ivanti\u00a0Sentry before the\u00a0R10.5.2, R10.6.2 and R10.7.1\u00a0versions\u00a0allows\u00a0a remote unauthenticated attacker to create arbitrary administrative accounts and obtain full administrative access\n\n\ud83c\udfaf WHO'S ", "url": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3movzfimayj25"}, {"timestamp": "2026-07-05T03:46:26.784Z", "date_only": false, "value": "2026-07-05T03:46:26.784041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuo2cvckc2l", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "263f2902-4e3d-4935-9732-a84f40776fbe", "content": "\u300cIvanti Sentry\u300d\u306b\u8907\u6570\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u3092\u516c\u958b\n\nIvanti\u306f\u3001\u540c\u793e\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u7ba1\u7406\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3\u3067\u5229\u7528\u3059\u308b\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u300cIvanti Sentry\u300d\u306b\u95a2\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u60272\u4ef6\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\u5229\u7528\u8005\u306b\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u308b\u3002\n\n\u73fe\u5730\u6642\u95932026\u5e746\u67089\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3057\u3001\u8106\u5f31\u6027\u300cCVE-2026-10520\u300d\u300cCVE-2026-10523\u300d\u306b\u3064\u3044\u3066\u660e\u3089\u304b\u306b\u3057\u305f\u3082\u306e\u3002\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u306e\u516c\u958b\u6642\u70b9\u3067\u8106\u5f31\u6027\u306e\u60aa\u7528\u306f\u78ba\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u3068\u3044\u3046\u3002\n\n\u300cCVE-2026-10520\u300d\u306f\u3001OS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3002\u8a8d\u8a3c\u3092\u5fc5\u8981\u3068\u3059\u308b\u3053\u3068\u306a\u304f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpuo2cvckc2l"}, {"timestamp": "2026-07-05T04:07:53.671Z", "date_only": false, "value": "2026-07-05T04:07:53.671495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpupampjsk2l", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "4d7cf570-0aa6-48c1-889c-19bce05f579d", "content": "Ivanti\u306e\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u304cPoC\u30b3\u30fc\u30c9\u516c\u958b\u5f8c\u306b\u60aa\u7528\u3055\u308c\u308b\n\nIvanti Sentry\u306f\u3001CVE-2026-10520\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u91cd\u5927\u306aOS\u30b3\u30de\u30f3\u30c9\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u306e\u8106\u5f31\u6027\u3092\u6a19\u7684\u3068\u3057\u305f\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u30b3\u30fc\u30c9\u304c\u516c\u958b\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u73fe\u5728\u6d3b\u767a\u306a\u60aa\u7528\u653b\u6483\u306b\u76f4\u9762\u3057\u3066\u3044\u308b\u3002\n\n\u3053\u306e\u8106\u5f31\u6027\u306f\u30012\u3064\u76ee\u306e\u91cd\u5927\u306a\u554f\u984c\uff08CVE-2026-10523\uff09\u3068\u3068\u3082\u306b\u30012026\u5e746\u67089\u65e5\u306bIvanti\u306b\u3088\u3063\u3066\u516c\u8868\u3055\u308c\u3001\u3069\u3061\u3089\u3082Sentry\u30e2\u30d0\u30a4\u30eb\u30c7\u30d0\u30a4\u30b9\u7ba1\u7406\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306e\u8907\u6570\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u3066\u3044\u308b\u3002\n\nIvanti\u306f\u958b\u793a\u8cc7\u6599\u306e\u4e2d\u3067\u3001\u7a4d\u6975\u7684\u306a\u60aa\u7528\u3092\u793a\u3059\u8a3c\u62e0\u306f\u306a\u3044\u3068\u8ff0\u3079\u3066\u3044\u308b\u3082\u306e\u306e\u3001...", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mpupampjsk2l"}, {"timestamp": "2026-07-12T08:00:06.535Z", "date_only": false, "value": "2026-07-12T08:00:06.535030Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/366", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "06540c6a-fec2-4b52-b090-31f382e19645", "content": "Ivanti Sentry Pre-Auth RCE\n\nIvanti Sentry authentication bypass and remote code execution vulnerabilities CVE-2026-10520, CVE-2026-10523.\n\nBlog: https://labs.watchtowr.com/more-evidence-that-words-dont-mean-what-we-thought-they-meant-ivanti-sentry-pre-auth-os-command-injection-cve-2026-10520/", "url": "https://t.me/P0x3k_1N73LL1G3NC3/366"}, {"timestamp": "2026-07-12T08:00:06.894Z", "date_only": false, "value": "2026-07-12T08:00:06.894603Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8300", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "90bc943c-ea6d-443d-9a87-7af65003b0ce", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0440\u0435\u0434\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:\n\n1. Fortinet \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0442\u0440\u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f, \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 FortiSandbox, FortiOS, FortiProxy \u0438 FortiPortal.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0442\u0440\u0435\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2026-25089\u00a0(CVSS 9,8), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e FortiSandbox, FortiSandbox Cloud \u0438 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 FortiSandbox PaaS.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - \u044d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 FortiOS \u0438 FortiProxy, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 API FortiPortal \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n2. Ivanti \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 Sentry 10.5.2, 10.6.2 \u0438 10.7.1, \u0430 \u0442\u0430\u043a\u0436\u0435 Endpoint Manager Mobile (EPMM) 12.9.0.1, 12.8.0.3 \u0438 12.7.0.2, \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Sentry\u00a0\u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u00a0\u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2026-10520 (CVSS 10), \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2026-10523 (CVSS 9,9), \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u0440\u043e\u043b\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.\n\n\u0412 EPMM \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 CVE-2026-6973 \u0438 CVE-2026-10727, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432 Apache \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n3. \u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u0435\u043c\u043e\u0439 Arista (EOS) \u043a\u0430\u043a 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430. CVE-2026-7473 (CVSS 6,9), \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0442\u0435\u043c, \u0447\u0442\u043e \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445 \u0442\u0438\u043f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043d\u0435\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c Arista EOS, \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0445 \u043a\u0430\u043a \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c \u0434\u0435\u043a\u0430\u043f\u0441\u0443\u043b\u044f\u0446\u0438\u0438, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0434\u0435\u043a\u0430\u043f\u0441\u0443\u043b\u044f\u0446\u0438\u0438, \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c GRE (Generic Routing Encapsulation) \u0438\u043b\u0438 VXLAN (Virtual Extensible LAN).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u0441\u0435\u0440\u0438\u0439 7020R, 7280R/R2 \u0438 7500R/R2. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 IP-in-IPv6 \u0438 GUE IPV6 decap group \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u044b \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0441\u0435\u0440\u0438\u0439 7280R3, 7500R3 \u0438 7800R3.\n\n4. ServiceNow \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0439 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u043d\u043e \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c (\u043a\u043e\u043f\u0438\u044f\u00a0\u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0431\u044b\u043b\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 Reddit), \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 5 \u0438\u044e\u043d\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0437\u043d\u0430\u043b \u043e\u0431 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 7 \u0430\u043f\u0440\u0435\u043b\u044f, \u043d\u043e \u043d\u0435 \u0441\u0447\u0438\u0442\u0430\u043b \u0435\u0451 \u043e\u043f\u0430\u0441\u043d\u043e\u0439. \u041f\u043e\u043a\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u043e \u0438 \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u0437\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n5. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange \u0434\u043b\u044f \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0438 \u0441\u043f\u0430\u043c\u0430 \u0432 \u0432\u0438\u0434\u0435 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c. \u0423\u044f\u0437\u0432\u0438\u043c\u044b Exchange Online \u0438 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Exchange \u0432 \u0433\u0438\u0431\u0440\u0438\u0434\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f\u0445.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441 \u043a\u043e\u043d\u0446\u0430 \u0430\u043f\u0440\u0435\u043b\u044f. \u0412 \u0430\u043f\u0440\u0435\u043b\u0435 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043f\u0430\u0442\u0447 \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0438 \u043f\u0438\u0441\u0435\u043c, \u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u044f\u0442\u044c \u0434\u043d\u0435\u0439 \u043e\u043d \u0431\u044b\u043b \u043e\u0442\u043c\u0435\u043d\u0435\u043d. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n6. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0418\u0418 \u0441\u0435\u0439\u0447\u0430\u0441 \u0432 \u0442\u0440\u0435\u043d\u0434\u0435, \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 Langflow AI \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-5027, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 \u043c\u0430\u0440\u0442\u0435.\n\n7. Anthropic \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0451 \u043c\u043e\u0434\u0435\u043b\u044c \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Mythos \u0442\u0435\u043f\u0435\u0440\u044c \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0437\u0430 \u0447\u0430\u0441.\n\n\u0412 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0442\u0435\u0441\u0442\u0430\u0445 Mythos \u0441\u043c\u043e\u0433\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a\u0430\u043a \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Firefox, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Windows. \u0411\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0441\u0442\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, Claude Opus \u0438 Sonnet, \u0442\u0430\u043a\u0436\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043d\u043e \u0441 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c\u044e.", "url": "https://t.me/true_secator/8300"}, {"timestamp": "2026-07-12T09:01:47.739Z", "date_only": false, "value": "2026-07-12T09:01:47.739268Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bdufstecru/3234", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "9de2cf6b-1385-496f-a9af-e7f5bcc967b2", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u0448\u043b\u044e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Ivanti Sentry \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root\n\nBDU:2026-08029\nCVE-2026-10520\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523", "url": "https://t.me/bdufstecru/3234"}, {"timestamp": "2026-07-12T10:00:03.801Z", "date_only": false, "value": "2026-07-12T10:00:03.801084Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/88113", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "84632df4-aea3-4dd6-a62c-0554410f432f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Ivanti #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a watchtowrlabs\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-10 00:50:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/88113"}, {"timestamp": "2026-07-12T11:51:57.515Z", "date_only": false, "value": "2026-07-12T11:51:57.515710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mqh4gua2622b", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "c9b15d8a-3d3f-461e-9aae-4a663e3d6add", "content": "\ud83d\udee1\ufe0f Manual T\u00e9cnico de Mitigaci\u00f3n: Vulnerabilidades CVE-2026-10520 y CVE-2026-10523 en Ivanti Sentry www.newstecnicas.com/2026/06/manu...", "url": "https://bsky.app/profile/newstecnicas.com/post/3mqh4gua2622b"}, {"timestamp": "2026-07-13T22:00:22.924Z", "date_only": false, "value": "2026-07-13T22:00:22.924618Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/89615", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "515044df-5b13-4e33-abe2-8ee155d83520", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Ivanti #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10523-Ivanti-sentry\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 10:31:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-10520 - CVE-2026-10523 - Ivanti Sentry\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89615"}, {"timestamp": "2026-07-15T00:00:17.676Z", "date_only": false, "value": "2026-07-15T00:00:17.676587Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/89615", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "cdb8b413-208e-447b-9cd0-d532993c5c36", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Ivanti #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-10523-Ivanti-sentry\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a gagaltotal\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-19 10:31:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-10520 - CVE-2026-10523 - Ivanti Sentry\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/89615"}, {"timestamp": "2026-07-17T12:40:02.892Z", "date_only": false, "value": "2026-07-17T12:40:02.892025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mqtrhii4sa2u", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "0f534205-d5eb-461c-8345-a2b398199f61", "content": "A critical-severity fix just shipped for Ivanti Standalone Sentry. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-10523", "url": "https://bsky.app/profile/vulny-app.bsky.social/post/3mqtrhii4sa2u"}, {"timestamp": "2026-07-23T08:10:00.137Z", "date_only": false, "value": "2026-07-23T08:10:00.137", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-10523", "record": "FKIE_CVE-2026-10523", "field": "lastModified"}, {"timestamp": "2026-08-21T10:45:55.993Z", "date_only": false, "value": "2026-08-21T10:45:55.993313Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mtllfng5rk2x", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "446695eb-03dd-4f10-823b-9cbc63e3a4a2", "content": "\ud83d\udee1\ufe0f Manual T\u00e9cnico de Mitigaci\u00f3n: Vulnerabilidades CVE-2026-10520 y CVE-2026-10523 en Ivanti Sentry www.newstecnicas.com/2026/06/manu...", "url": "https://bsky.app/profile/newstecnicas.com/post/3mtllfng5rk2x"}, {"timestamp": "2026-08-24T15:00:04.905Z", "date_only": false, "value": "2026-08-24T15:00:04.905906Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/99499", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "baa87aaf-660a-4344-a58e-33e7e3b96315", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a RCE-CVE-2026-10520-CVE-2026-10523\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a imbas007\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-24 13:37:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/99499"}, {"timestamp": "2026-09-01T13:00:05.424Z", "date_only": false, "value": "2026-09-01T13:00:05.424164Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/p3Nt3st3rsTAr/45", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "dca22150-1d75-4f0c-95ac-a86f73f3e94f", "content": "https://github.com/p3Nt3st3r-sTAr/CVE-2026-10520-CVE-2026-10523", "url": "https://t.me/p3Nt3st3rsTAr/45"}, {"timestamp": "2026-09-02T01:05:08.074Z", "date_only": false, "value": "2026-09-02T01:05:08.074216Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/p3Nt3st3rsTAr/45", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "7abf00c9-1150-4ce9-81c4-64030b22a9d4", "content": "https://github.com/p3Nt3st3r-sTAr/CVE-2026-10520-CVE-2026-10523", "url": "https://t.me/p3Nt3st3rsTAr/45"}, {"timestamp": "2026-09-08T09:34:21.520Z", "date_only": false, "value": "2026-09-08T09:34:21.520000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://blog.securelayer7.net/cve-2026-10520-ivanti-sentry-os-command-injection", "record": "CVE-2026-10523", "field": "creation_timestamp", "uuid": "f12acf01-17a8-4040-9b3a-adbd1e06303c", "url": "https://blog.securelayer7.net/cve-2026-10520-ivanti-sentry-os-command-injection"}]}