CVE-2026-102031 — Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges …
Published: 2026-10-14 · CVSS: 9.3 · CVSS 4.0
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7