{"id":"CVE-2026-107510","published":"2026-10-08T10:17:09.553","lastModified":"2026-10-09T07:17:18.097","description":"An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-88","CWE-269","CWE-284"],"vendors":[],"products":[],"references":[{"url":"https://aumlayer.com/insights/administrator-is-not-root-infoblox-nios-privilege-escalation/","tags":[]},{"url":"https://support.infoblox.com/s/article/Security-Advisory-NIOS-Maintenance-Mode-Permits-Root-Shell","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A high-privilege user can inject arguments into troubleshooting commands, leading to privilege escalation.","exploitability":"Exploitation requires an authenticated high-privilege user and knowledge of specific troubleshooting commands, making it moderately difficult.","blast_radius":"If exploited, the attacker could gain full system control, potentially leading to widespread damage.","remediation":"Disable or restrict access to the affected troubleshooting commands.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","priv-escalation","command-injection"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:26.184Z"}}