Which versions of Junos Os Evolved are affected by CVE-2026-33788?

Juniper Networks Junos OS Evolved contains a local privilege escalation vulnerability affecting PTX Series routers that allows low-privileged authenticated users to gain administrative access to line…. A patch is available.

How to fix or mitigate CVE-2026-33788?

Within 24 hours: identify all PTX Series routers (PTX10004, PTX10008, PTX10016) running affected firmware branches with JNP10K-LC1201 or JNP10K-LC1202 line cards and document current firmware versions. Within 7 days: apply vendor-released patch to all identified systems according to Juniper's published update schedule, prioritizing production routers first. Within 30 days: complete patching of all affected devices and verify through console access that line card management authentication is enforced.

Junos Os Evolved CVE-2026-33788

Q: What is the CVSS score of CVE-2026-33788?

CVE-2026-33788 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21093 HIGH

Missing Authentication for Critical Function (CWE-306)

2026-04-09 juniper

GHSA-w5q7-9fqr-f6hx

Authentication Bypass Juniper Junos Os Evolved

8.5

CVSS 4.0 · Vendor: juniper

Severity by source

Vendor (juniper) PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X

Primary rating from Vendor (juniper) · only source for this CVE.

CVSS VectorVendor: juniper

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:M/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:00 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

22.2R3-S4-EVO,22.3R3-S3-EVO,21.2R3-S8-EVO

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21093

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

CVE Published

Apr 09, 2026 - 21:27 nvd

HIGH 8.5

DescriptionCVE.org

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device.

A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead to a full compromise of the affected component.

This issue affects Junos OS Evolved on PTX10004, PTX10008, PTX100016, with JNP10K-LC1201 or JNP10K-LC1202:

All versions before 21.2R3-S8-EVO,
21.4-EVO versions before 21.4R3-S7-EVO,
22.2-EVO versions before 22.2R3-S4-EVO,
22.3-EVO versions before 22.3R3-S3-EVO,
22.4-EVO versions before 22.4R3-S2-EVO,
23.2-EVO versions before 23.2R2-EVO.

AnalysisAI

Local privilege escalation in Juniper Networks Junos OS Evolved on PTX Series routers allows authenticated users with low privileges to gain high-privileged direct access to Flexible PIC Concentrators (FPCs), enabling potential full compromise of affected line cards. Impacts PTX10004, PTX10008, PTX10016 with JNP10K-LC1201 or JNP10K-LC1202 line cards across multiple firmware branches. Missing authentication on critical FPC management functions permits unauthorized privilege elevation. No public exploit identified at time of analysis.

Technical ContextAI

Root cause is CWE-306 (Missing Authentication for Critical Function) in FPC access control mechanisms. Local users bypass authentication checks for direct FPC interaction, escalating from low to high privileges within the chassis subsystem. Affects Junos OS Evolved's FPC management layer on specific PTX hardware platforms equipped with JNP10K-LC1201/LC1202 line cards.

RemediationAI

Vendor-released patches: upgrade to 21.2R3-S8-EVO, 21.4R3-S7-EVO, 22.2R3-S4-EVO, 22.3R3-S3-EVO, 22.4R3-S2-EVO, or 23.2R2-EVO depending on current branch. Verify installed line card models match JNP10K-LC1201 or JNP10K-LC1202 to confirm applicability. Restrict local user access via role-based access controls and monitor FPC access logs for anomalous privilege escalation attempts. Implement principle of least privilege for all local accounts. Full technical details and upgrade procedures available in Juniper security advisory https://kb.juniper.net/JSA107806. No effective workarounds exist; patching is required to eliminate the authentication bypass.