CVE-2026-102031PATCHED

juniper · junos os evolved

Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

Description

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.

Affected Products

Vendor	Product	Versions
juniper	junos os evolved	0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 23.4X100, 25.2X100, 25.4X300

References

https://supportportal.juniper.net/JSA112250(vendor-advisory)

Related News (2 articles)

Tier B

CERT-FR4d ago

Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

→ No new info (linked only)

Tier C

VulDB5d ago

CVE-2026-102031 | Juniper Networks Junos OS Evolved up to 23.4X100 TACACS+ Authorization Refresh os command injection

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

23.2R2-S7.7-EVO23.4R2-S8.11-EVO24.2R2-S5.6-EVO24.4R2-S5-EVO25.2R2-S2-EVO25.4R1-S3-EVO26.2R1-S2-EVO25.2X100-D35-EVO25.4X300-D40-EVO

CWECWE-78

PublishedOct 14, 2026

Trending Score32

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-102178

Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise

Trending: 32

CRITICALCVE-2026-101982

Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used

Trending: 32

CRITICALCVE-2026-33792

Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured

Trending: 32

CRITICALCVE-2026-33796

Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

Trending: 32

CRITICALCVE-2026-101954

Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

Trending: 32

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Oct 14, 2026

Discovered by ZDM

Oct 14, 2026

Patch Available

Oct 16, 2026