Last seen October 7, 2026

PoeLLM Supply-Chain Compromise

Quoth the LLM, 'More and more'

Technical Severity
Low severity
Lifecycle Status

NEW

Sources

What Happened

Quoth the LLM, 'More and more'

Why This Matters

The evidence matters to defenders using PoeLLM because it may place downstream environments at risk through compromised dependencies.

Recommended Action

Confirm whether and is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Oct 07, 2026 21:31

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

AnthropicGitHubGoogleOpenAIJailbreakingSupply Chain

Authoritative Intelligence

CVE CVE-2026-10520 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

CVE-2026-10520 on GitHub

CVE-2026-10520: 6 public repository references found.

01xJB/CVE-2026-10520-POC

Possible public PoC reference

Exploit for CVE-2026-10520 | Ivanti Sentry - OS Command Injection

0 stars · Python

Open repository
watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523

Public GitHub reference

GitHub repository for an AI tooling project

13 stars · Python

Open repository
0xBlackash/CVE-2026-10520

Public GitHub reference

CVE-2026-10520

4 stars · Python

Open repository
gagaltotal/CVE-2026-10523-Ivanti-sentry

Public GitHub reference

CVE-2026-10520 - CVE-2026-10523 - Ivanti Sentry

3 stars · Go

Open repository
HORKimhab/CVE-2026-10520-10523

Public GitHub reference

CVE-2026-10520 and CVE-2026-10523

0 stars · Python

Open repository
error-inside/CVE-2026-10520

Public GitHub reference

Root-Level RCE via OS Command Injection in Ivanti Sentry

0 stars · Python

Open repository

A public PoC or exploit-related repository means weaponization material may exist in the open. It does not prove your environment was targeted.

Timeline

  • Incident first seen
    Oct 07, 2026 21:31

    BugSkan first recorded this incident.

  • Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
    Oct 07, 2026 21:31

    theregister.com · Vulnerability

Sources

Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers

theregister.com · Oct 07, 2026 21:31

Quoth the LLM, 'More and more'

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence