CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 25.2R2-S2, 25.4R1-S3, 26.2R1-S2, 25.2R2-S2-EVO, 25.4R1-S3-EVO, and 3 more
- Public exploit
- None on Exploit-DB
CISA SSVC
- Exploitation: none
- Automatable: yes
- Technical impact: total
?
Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).
SSVC documentationSummary
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.
Affected versions
- Juniper Networks Junos OS
From 25.2 · fixed in 25.2R2-S2; From 25.4 · fixed in 25.4R1-S3; From 26.2 · fixed in 26.2R1-S2
- Juniper Networks Junos OS Evolved
From 25.2 · fixed in 25.2R2-S2-EVO; From 25.4 · fixed in 25.4R1-S3-EVO; From 26.2 · fixed in 26.2R1-S2-EVO; From 25.2X100 · fixed in 25.2X100-D35-EVO; From 25.4X300 · fixed in 25.4X300-D40-EVO