CVE-2026-21902: falha crítica em Juniper Networks Junos OS Evolved
Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root
Publicada em · Atualizada em
75Vexday Risk Score
Priorize a correção. Ela exploração observada pelo VulnCheck e tem prova de conceito pública.
ssvc Actcvss 9.3epss 18%
da publicação à arma3 dias
Publicada no NVD25 de fev.
1ª PoC+3d
VulnCheck+17d
probabilidade de exploração
18%top 3% das CVEs
exploração observada
simVulnCheck
2 exploit(s) público(s)
An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root.
The On-Box Anomaly detection framework should only be reachable by other internal processes over the internal routing instance, but not over an externally exposed port. With the ability to access and manipulate the service to execute code as root a remote attacker can take complete control of the device.
Please note that this service is enabled by default as no specific configuration is required.
This issue affects Junos OS Evolved on PTX Series:
* 25.4 versions before 25.4R1-S1-EVO, 25.4R2-EVO.
This issue does not affect Junos OS Evolved versions before 25.4R1-EVO.
This issue does not affect Junos OS.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/AU:Y/R:U/RE:M/U:Red
Produtos afetados
Juniper Networks · Junos OS EvolvedPoCs públicas encontradas — 2
cve_referencegithub.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.pynão verificadovulncheckvulncheck.com/xdb/d8f09a8c7277não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Juniper Networks Junos OS Evolved
No mesmo produto, das mais perigosas para as menos.
CVE-2023-28983HIGHJunos OS Evolved: Shell Injection vulnerability in the gNOI serverEPSS 1.5%CVE-2020-1626HIGHJunos OS Evolved: Denial of Service vulnerability in processing high rate of specific packetsEPSS 1.4%CVE-2020-1638HIGHJunos OS & Junos OS Evolved: A specific IPv4 packet can lead to FPC restart.EPSS 1.3%CVE-2021-0211CRITICALJunos OS and Junos OS Evolved: Upon receipt of a specific BGP FlowSpec message network traffic may be disrupted.EPSS 1.3%CVE-2020-1662HIGHJunos OS and Junos OS Evolved: RPD crash due to BGP session flapping.EPSS 1.3%CVE-2020-1648HIGHJunos OS and Junos OS Evolved: RPD crash when processing a specific BGP packetEPSS 1.3%