Is there a patch available for CVE-2026-33787?

Yes, a patch is available for CVE-2026-33787. Update the affected software to the latest version immediately.

Juniper CVE-2026-33787

Q: What is the CVSS score of CVE-2026-33787?

CVE-2026-33787 has a CVSS 4.0 base score of 6.8 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21205 MEDIUM

Improper Check for Unusual or Exceptional Conditions (CWE-754)

2026-04-09 sirt@juniper.net

GHSA-w7w4-rh54-5rf6

Denial Of Service Juniper

6.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

23.4R2-S7,23.2R2-S6,25.2R1-S1

EUVD ID Assigned

Apr 09, 2026 - 22:22 euvd

EUVD-2026-21205

Analysis Generated

Apr 09, 2026 - 22:22 vuln.today

CVE Published

Apr 09, 2026 - 22:16 nvd

MEDIUM 6.8

DescriptionCVE.org

An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600 allows a local attacker with low privileges to cause a complete Denial of Service (DoS).

When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again.

This issue affects Junos OS on SRX1500, SRX4100, SRX4200 and SRX4600:

23.2 versions before 23.2R2-S6,
23.4 versions before 23.4R2-S7
24.2 versions before 24.2R2-S2,
24.4 versions before 24.4R2,
25.2 versions before 25.2R1-S1, 25.2R2.

AnalysisAI

Denial of service in Juniper Networks Junos OS chassis control daemon (chassisd) on SRX1500, SRX4100, SRX4200, and SRX4600 allows local attackers with low privileges to crash the daemon via a specific 'show chassis' CLI command, causing complete traffic disruption until modules restart. The vulnerability affects Junos OS versions 23.2 before 23.2R2-S6, 23.4 before 23.4R2-S7, 24.2 before 24.2R2-S2, 24.4 before 24.4R2, and 25.2 before 25.2R1-S1 or 25.2R2. No public exploit code or active exploitation has been identified at time of analysis.

Technical ContextAI

The vulnerability exists in chassisd, the chassis control daemon responsible for managing hardware components and system state on Juniper SRX Series security appliances. The root cause is classified as CWE-754 (Improper Check for Unusual or Exceptional Conditions), indicating insufficient validation or error handling when processing specific 'show chassis' CLI commands. When the daemon encounters an unexpected condition without proper exception handling, it crashes and enters a restart cycle. During this restart sequence, all traffic forwarding is interrupted until all hardware modules complete their online initialization, creating a complete denial of service condition. This is a local vulnerability requiring command-line access to the device, not a remote attack vector.

RemediationAI

Upgrade Junos OS to the patched versions: 23.2R2-S6 or later for the 23.2 branch, 23.4R2-S7 or later for the 23.4 branch, 24.2R2-S2 or later for the 24.2 branch, 24.4R2 or later for the 24.4 branch, or 25.2R1-S1, 25.2R2, or later for the 25.2 branch. Consult the Juniper Security Advisory JSA107873 at https://kb.juniper.net/JSA107873 for specific upgrade procedures and any additional mitigation guidance. In the interim, restrict local access to the CLI and 'show chassis' command execution to trusted administrative users only, and monitor for unexpected chassisd restarts via system logs and management interfaces.