CVE-2026-10520 - Vulnerability Details

Related Threat Clusters

• ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

  A coordinated supply chain attack has been identified, targeting vulnerability researchers and penetration testers through malicious proof-of-concept (PoC) repositories on GitHub. The malware, named ChocoPoC, is a…

  10 articles · Updated July 1, 2026
• Ivanti Sentry Vulnerabilities Allow Remote Code Execution and Admin Access

  Ivanti has patched two critical vulnerabilities in its Sentry secure mobile gateway, formerly MobileIron Sentry. The first, CVE-2026-10520, is an OS command injection flaw allowing remote code execution with root…

  38 articles · Updated June 10, 2026

Recent Intelligence Reports

• Dont Eat The Chocopocs How Vulnerability Researchers Were Repeatedly Targeted By Trojanised Exploits — www.sekoia.com · July 2, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub — Bleepingcomputer · July 1, 2026
• New ChocoPoC malware targets researchers via trojanized PoC exploits — Bleepingcomputer · July 1, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub — Bleepingcomputer · July 1, 2026
• Max severity Ivanti Sentry vulnerability now exploited in attacks — Bleepingcomputer · June 11, 2026
• Ivanti patches critical Sentry flaws that lead to full device takeover — Csoonline · June 10, 2026
• CRITICAL ROOT — Ccb.Belgium.Be · June 10, 2026
• Ivanti releases patches for critical Sentry vulnerabilities | brief — Scworld · June 10, 2026

Related Entities