CVE-2026-102059
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
- Risk score
- 71/100
- CVSS
- 8.8 v3.1
- Exploit chance (30 days)
- 3.9%
- Published
- 14 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary commands with root priv…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- Exploitation likely: EPSS 3.9% (top 10%)
References
Original description
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary commands with root privileges via a rogue DHCP server.
Last activity 14 Oct 2026. Patch Forecast updates every hour.