An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of…
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary commands with root privileges via a rogue DHCP server.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Juniper Networks
- Product
- Junos OS, SRX / MX / EX / QFX
- CVSS
- 8.8
- EPSS
- 0.039 (p90)
- Exposure class
- Edge / VPN / firewall
Why it ranks 28 (Notable)
- CVSS 8.8 high
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Juniper Networks)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-102059 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.