EUVD-2026-94824
GHSA-hgvr-pf8h-6rjx
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Requires authenticated high-privilege admin (PR:H) over the network management interface (AV:N/AC:L); argument injection escapes the app boundary to root (S:C) with full C/I/A impact.
Primary rating from Vendor (Infoblox).
CVSS VectorVendor: Infoblox
Lifecycle Timeline
2DescriptionCVE.org
An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation.
AnalysisAI
Argument injection in Infoblox NIOS troubleshooting commands allows an authenticated high-privilege administrator to escalate to root-level shell access on the appliance. The flaw resides in the maintenance-mode diagnostic interface where user-supplied arguments are passed to underlying system commands without proper sanitization, and exploitation requires a pre-existing administrative credential (PR:H) rather than being reachable by anonymous or low-privilege users. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated high-privilege (administrative) NIOS account per PR:H, plus access to the NIOS troubleshooting/maintenance-mode command interface where user-supplied arguments are passed to underlying commands (per the 'Maintenance Mode Permits Root Shell' advisory). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-severity privilege-escalation flaw but NOT a drop-everything emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fix referenced in the Infoblox security advisory at https://support.infoblox.com/s/article/Security-Advisory-NIOS-Maintenance-Mode-Permits-Root-Shell; no exact patched version is provided in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, confirm the affected NIOS appliance inventory and version levels against the Infoblox security advisory for CVE-2026-107510, since no vendor-released patch has been identified at time of analysis; restrict access to the maintenance-mode and diagnostic interfaces to a minimal set of trusted administrators, enforce multi-factor authentication on all NIOS administrative accounts, and confirm that diagnostic sessions are logged to a centralized, tamper-resistant log store. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation. Rated critical severity (CVSS 9.8), thi
Infoblox NIOS through 8.6.4 executes with more privileges than required. Rated critical severity (CVSS 9.8), this vulner
Infoblox NIOS through 8.6.4 has Improper Authentication for Grids. Rated critical severity (CVSS 9.8), this vulnerabilit
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary w
Infoblox NIOS through 8.6.4 has Improper Access Control for Grids. Rated critical severity (CVSS 9.1), this vulnerabilit
In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution. [CVSS 8.8 HIGH]
Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell
In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mech
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today