High severity8.8NVD Advisory· Published Oct 14, 2026
CVE-2026-102059
CVE-2026-102059
Description
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary commands with root privileges via a rogue DHCP server.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.