CVE-2026-102031

CriticalCVSS 9.8

Published: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Summary

An OS command injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.

Risk Assessment

A low-privileged user can escalate privileges to root, potentially leading to full device compromise.

Recommendation

Install security patches from Juniper Networks and consider disabling periodic TACACS+ authorization-refresh if not required.

Other vulnerabilities in Juniper Networks Junos OS Evolved

CVE-2025-59969Medium
In Junos OS Evolved on PTX and QFX5000 series, a classic buffer overflow in evo-aftmand/evo-pfemand allows an unauthenticated adjacent attacker to cause a DoS by sending crafted multicast packets, leading to crashes and restarts of line cards or non-line card devices.

Original NVD description (English source)

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS