CVE-2026-102079— Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
Quick assessment
Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS 的命令行界面（CLI）中存在一种操作系统命令注入漏洞，允许本地低权限攻击者完全控制设备。 某个特定的 命令未对用户提供的输入进行充分 sanitization（清理/过滤），导致该输入可能被解释为命令执行。这使得攻击者能够以 root 权限执行未预期的命令，从而导致未经授权的系统访问或修改。 该漏洞影响以下 Junos OS 版本： 24.4 系列版本中早于 24.4R2-S4 的版本； 25.2 系列版本中早于 25.2R2-S1 的版本； 25.4 系列版本中
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Juniper Networks | Junos OS | 24.4< 24.4R2-S4 |
affected |
25.2< 25.2R2-S1 |
affected | ||
25.4< 25.4R1-S3 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102079
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
Source: CVE Program / CVE List V5
Vulnerability Description
An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.
A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended command execution with root privileges, which can lead to unauthorized system access or modification.
This issue affects Junos OS:
* 24.4 versions before 24.4R2-S4;
* 25.2 versions before 25.2R2-S1;
* 25.4 versions before 25.4R1-S3;
This issue does not affect Junos OS releases before 24.4R1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 24.4 ~ 24.4R2-S4 | - |
|
II. Public POCs for CVE-2026-102079
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102079
请登录查看更多情报信息。
Other References for CVE-2026-102079 (1)
Same Patch Batch · Juniper Networks · 2026-10-14 · 153 CVEs total
| CVE-2026-101990 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re |
| CVE-2026-102182 | 9.8 CRITICAL | Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution |
| CVE-2026-102031 | 9.8 CRITICAL | Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authori |
| CVE-2026-101950 | 9.8 CRITICAL | Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Se |
| CVE-2026-33789 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a speci |
| CVE-2026-33792 | 9.8 CRITICAL | Junos OS: SRX Series: An attacker causes remote code execution and denial of service when |
| CVE-2026-101954 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover |
| CVE-2026-101983 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual |
| CVE-2026-101982 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise wh |
| CVE-2026-102175 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of servi |
| CVE-2026-33796 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP r |
| CVE-2026-102178 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malform |
| CVE-2026-101980 | 9.8 CRITICAL | Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Ech |
| CVE-2026-101956 | 9.8 CRITICAL | Junos OS: Unauthorized root command execution when J-Web is enabled |
| CVE-2026-101986 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution |
| CVE-2026-102176 | 8.8 HIGH | Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the S |
| CVE-2026-102050 | 8.8 HIGH | Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of |
| CVE-2026-102061 | 8.8 HIGH | Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provi |
| CVE-2026-102055 | 8.8 HIGH | Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execu |
| CVE-2026-102059 | 8.8 HIGH | Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server caus |
Showing top 20 of 153 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS
-
CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network acces -
CVE-2026-101952
Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update -
CVE-2026-101949
Junos OS and Junos OS Evolved: In a scenario with VPN-flowsp -
CVE-2026-101964
Junos OS and Junos OS Evolved: An attacker can cause an rpd -
CVE-2026-101963
Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an
Same vendor: Juniper Networks
-
CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network acces -
CVE-2026-101952
Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update -
CVE-2026-101949
Junos OS and Junos OS Evolved: In a scenario with VPN-flowsp -
CVE-2026-101964
Junos OS and Junos OS Evolved: An attacker can cause an rpd -
CVE-2026-101963
Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an
Same weakness: CWE-78
-
CVE-2026-45449
Unitronics - CWE-78: Improper Neutralization of Special Elem -
CVE-2026-110957
Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os -
CVE-2026-47786
Pre-Authentication Command Injection -
CVE-2026-34007
**RCE** Unsanitized `X-Forwarded-For` header passed to `shel -
CVE-2026-110925
Openssh: openssh: '$' and '\' in a command-line username exp
V. Comments for CVE-2026-102079
No comments yet