by Kastro
Paper/Archive/CVE-2026-107510

CVE-2026-107510

Infoblox NIOS — Authenticated argument injection in NIOS command line leading to privilege escalation

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
32
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 22.0.220 × 204.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation.

Affected

ProductAffectedFixed inSource
NIOS9.0.x – 9.1.0–CNA

Scores by source

Infoblox (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.infoblox.com/s/article/Security-Advisory-NIOS-Maintenance-Mode-Permits-Root-Shellrefaumlayer.com/insights/administrator-is-not-root-infoblox-nios-privilege-escalation