What happened

CSA Singapore warned on June 12, 2026 that Ivanti Sentry is affected by two critical flaws, CVE-2026-10520 and CVE-2026-10523. The agency said attackers could execute commands as root, create unauthorized admin accounts, and take full control without authentication.

Why it matters

Ivanti Sentry sits on a sensitive edge of enterprise access. When a gateway like this is exposed, the risk is not just service disruption; it can become complete administrative takeover.

What readers should do

Administrators should update affected versions immediately, especially any deployment prior to the fixed releases listed in the advisory. If the product is exposed externally, treat it as a high-priority patching event rather than a routine update.

Bottom line

Critical gateway flaws move fast from disclosure to exploitation. The safest response is to patch first and investigate later.