CVE-2026-102031: Juniper Networks Junos OS Evolved

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.

Affected products

• Juniper Networks Junos OS Evolved: before 23.2R2-S7.7-EVO (fixed in 23.2R2-S7.7-EVO); from 23.4, before 23.4R2-S8.11-EVO (fixed in 23.4R2-S8.11-EVO); from 24.2, before 24.2R2-S5.6-EVO (fixed in 24.2R2-S5.6-EVO); from 24.4, before 24.4R2-S5-EVO (fixed in 24.4R2-S5-EVO); from 25.2, before 25.2R2-S2-EVO (fixed in 25.2R2-S2-EVO); from 25.4, before 25.4R1-S3-EVO (fixed in 25.4R1-S3-EVO); …

Published 2026-10-14. Last modified 2026-10-16.