{"id":"CVE-2026-102079","title":"An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.\n\nA specific 'request csds' command doesn't sanitize user provided input so that…","summary":"An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.\n\nA specific 'request csds' command doesn't sanitize user provided input so that…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-78"],"vendor":"Juniper Networks","product":"Junos OS","affected":["junos_os >= 24.4 < 24.4R2-S4","junos_os >= 25.2 < 25.2R2-S1","junos_os >= 25.4 < 25.4R1-S3"],"published":"2026-10-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T16:24:19.073","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102079","references":[{"url":"https://supportportal.juniper.net/JSA112180","label":"sirt@juniper.net"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-15T03:57:24.741385Z"},"ingestedAt":"2026-10-14T17:44:53.665Z","epss":0.00659,"epssPercentile":0.51311,"slug":"CVE-2026-102079","body":"## Overview\n\nAn OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.\n\nA specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended command execution with root privileges, which can lead to unauthorized system access or modification.\n\n\n\n\n\nThis issue affects Junos OS:\n\n\n  *  24.4 versions before 24.4R2-S4;\n  *  25.2 versions before 25.2R2-S1;\n  *  25.4 versions before 25.4R1-S3;\n\n\n\n\n\n\nThis issue does not affect Junos OS releases before 24.4R1.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}