CVE-2026-110536

The D-Link DIR-868L (version 2.01b05 ) is vulnerable to an OS command injection vulnerability within the HNAP CGI Handler component. Specifically, the vulnerability exists in the system function of the /htdocs/cgibin file. An attacker can achieve remote code execution by manipulating the SOAPACTI...

EUVD-2026-101590

A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation of the argument SOAPACTION can lead to os command injection. The attack may be launched remotely. The exploit has been...

CVE-2026-102079

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...

CVE-2026-102059

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

CVE-2026-102031

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-101978

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted gRPC response...

CVE-2026-101967

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response...

CVE-2026-102059

Juniper Networks Junos OS and Junos OS Evolved on EX Series , SRX Series , and QFX Series are vulnerable to an OS Command Injection (CWE-78) vulnerability. The flaw exists in the phone-home daemon (phcd) , where the software fails to properly neutralize special elements used in OS commands. This ...

CVE-2026-102059 Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

EUVD-2026-101385

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary...

CVE-2026-102031

A critical OS Command Injection vulnerability exists in the TACACS component of Juniper Networks Junos OS Evolved . When periodic TACACS+ authorization-refresh is enabled, a low-privileged TACACS+-authenticated user can execute arbitrary commands with root privileges . No specific affected versio...

CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

EUVD-2026-101356

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled...

CVE-2026-102079 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...

CVE-2026-102079

Juniper Networks Junos OS is vulnerable to an OS command injection vulnerability within the CLI. The issue stems from a lack of input sanitization in a specific 'request csds' command, allowing a local, low-privileged attacker to execute unintended commands with root privileges . This could resul...

EUVD-2026-101465

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...

CVE-2026-101967 Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response...

CVE-2026-101967

Juniper Networks Junos OS Evolved (PTX Series) is vulnerable to an OS Command Injection vulnerability (CWE-78) within the bootzd zero-touch provisioning daemon . An unauthenticated attacker on the management LAN can execute arbitrary commands with root-level privileges by providing a crafted DHCP...

EUVD-2026-101430

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response...

CVE-2026-101978 Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted gRPC response...