CVE-2026-102031

A low-privileged TACACS+ user can execute root commands via OS Command Injection in Juniper Networks Junos OS Evo when periodic authorization-refresh is enabled.

This OS Command Injection flaw in Juniper's TACACS+ allows attackers to escalate privileges to root, directly violating CMMC/NIST 800-171 requirements for access control and system integrity. DIB organizations must patch Junos OS Evo immediately and disable periodic authorization-refresh until a fix is applied, as this represents a critical, avoidable exposure to remote code execution.

Shame score — Juniper shipped a critical OS command injection flaw in its TACACS+ implementation that allowed privilege escalation to root, a severe and avoidable failure that directly undermines access control and system integrity for defense contractors.