375 matches found
CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability exists in the SonicOS TACACS+ authentication client . Under specific conditions, a remote unauthenticated attacker could exploit this flaw to cause an application-level denial of service . This vulnerability is identified as CWE-122 an...
EUVD-2026-118431
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...
CVE-2026-77709
A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...
EUVD-2026-118430
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...
CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability exists in the SonicOS TACACS+ authentication client . Under specific conditions, a remote unauthenticated attacker could exploit this flaw to cause an application-level denial of service . This vulnerability is tracked under CVE-2026-...
CVE-2026-77708
A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions could potentially enable a remote unauthenticated attacker to cause an application level denial of service...
freeradius-server
The FreeRADIUS server BuildStatusLink !Coverity statusCoverityStatusCoverityStatusLink !OSS-Fuzz statusOssFuzzOssFuzzLink Introduction The FreeRADIUS Server Project is a high performance and highly configurable multi-protocol policy server, supporting RADIUS, DHCPv4 DHCPv6, DNS, TACACS+ and VMPS...
tac_plus-pre-auth-rce
tacplus Pre-Auth Remote Command Execution Vulnerability This repository contains information about a pre-auth remote command execution vulnerability in different open-source implementations of tacplus. The following two forks are affected: Shrubbery Networks tacplus Facebook tacplus However, both...
CVE-2026-102031
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...
CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...
CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...
EUVD-2026-101356
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...
CVE-2026-102031
A critical OS Command Injection vulnerability exists in the TACACS component of Juniper Networks Junos OS Evolved . When periodic TACACS+ authorization-refresh is enabled, a low-privileged TACACS+-authenticated user can execute arbitrary commands with root privileges . No specific affected versio...
CVE-2026-102031: Improper Neutralization of Special Elements used in an OS Command
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...
PT-2026-113872
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved affected versions not specified Description An OS Command Injection issue exists in the TACACS component. This allows a low-privileged user authenticated via TACACS+ to execute commands with root privileges,...
EUVD-2026-94669
Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...
TACACS+ Root Code Execution
The vulnerability of the TACACS+ protocol implementation in the tacplus authentication daemon is related to deficiencies in the formatting string processing mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges...