{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ojuniperjunos_os_evolved/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-102031"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Junos OS Evolved"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","cve","network-security"],"_cs_type":"advisory","_cs_vendors":["Juniper Networks"],"content_html":"\u003cp\u003eA critical OS command injection vulnerability (CVE-2026-102031) has been identified in the TACACS component of Juniper Networks Junos OS Evolved. This vulnerability allows an attacker who has successfully authenticated via TACACS+ to execute arbitrary operating system commands with root privileges. The exploitation vector is contingent on the device having the periodic TACACS+ authorization-refresh feature enabled.\u003c/p\u003e\n\u003cp\u003eBecause this vulnerability bypasses standard privilege restrictions for authenticated users, it represents a significant risk for lateral movement, persistent configuration modification, and full system compromise. Detection and mitigation should focus on identifying unauthorized command execution patterns following the periodic authorization-refresh cycle and applying the vendor-provided firmware updates immediately.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability carries a CVSS 3.1 base score of 9.8, indicating the potential for full system compromise. If exploited, an attacker gains root-level access to the networking device, which could be used to bypass security policies, intercept or manipulate network traffic, and maintain long-term persistence within the enterprise network infrastructure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eApply the security patches for Junos OS Evolved provided by Juniper Networks to address CVE-2026-102031.\u003c/li\u003e\n\u003cli\u003eAudit all devices running Junos OS Evolved to determine if the periodic TACACS+ authorization-refresh feature is enabled.\u003c/li\u003e\n\u003cli\u003eDisable the periodic TACACS+ authorization-refresh feature on internet-facing or high-value network equipment as a temporary mitigating control until patches can be deployed.\u003c/li\u003e\n\u003cli\u003eMonitor administrative session logs for unusual command execution patterns or unauthorized attempts to leverage the TACACS+ authorization-refresh process.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T18:40:30Z","date_published":"2026-10-14T18:33:00Z","id":"https://feed.craftedsignal.io/briefs/2026-10-juniper-junos-os-evolved-rce/","summary":"An OS command injection vulnerability in the TACACS component of Juniper Junos OS Evolved allows authenticated, low-privileged users to achieve root-level code execution.","title":"OS Command Injection in Juniper Junos OS Evolved TACACS","url":"https://feed.craftedsignal.io/briefs/2026-10-juniper-junos-os-evolved-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:o:juniper:junos_os_evolved:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}