CVE-2026-107510

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-10-08

Last updated on: 2026-10-09

Assigner: Infoblox

Description

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-09

Generated

2026-10-19

AI Q&A

2026-10-08

EPSS Evaluated

2026-10-18

NVD

CVE-2026-107510

EUVD

EUVD-2026-94824

Affected Vendors & Products

Vendor	Product	Version / Range
Infoblox	NIOS	9.0.x

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-88	The product constructs a string for a command to be executed by a separate component in another control sphere, but it does not properly delimit the intended arguments, options, or switches within that command string.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated user with high privileges to inject arguments into troubleshooting commands. This injection can lead to privilege escalation, where the attacker gains higher access levels than originally intended.

Detection Guidance

Since this is an authenticated privilege escalation via command injection, monitor for unusual command execution by high-privilege users. Check logs for unexpected arguments in troubleshooting commands. Review user sessions for suspicious activity during or after command execution.

Impact Analysis

An attacker could exploit this to gain elevated privileges, potentially allowing them to perform unauthorized actions, access sensitive data, or take control of the system. This could lead to data breaches or system compromise.

Compliance Impact

This vulnerability allows an authenticated high privilege user to escalate privileges through command injection, which could lead to unauthorized access or control of systems. Such breaches may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data security) by exposing sensitive information or failing to maintain access controls.

Mitigation Strategies

Restrict high privilege user access to troubleshooting commands and validate all inputs to prevent argument injection. Monitor command execution logs for suspicious activity.

Hi! I’m here to help you understand CVE-2026-107510. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70