Skip to main content

Juniper EUVDEUVD-2026-21196

| CVE-2026-33776 MEDIUM
Missing Authorization (CWE-862)
2026-04-09 sirt@juniper.net GHSA-cp8x-pvqx-wpcc
Authentication Bypass Juniper
6.8
CVSS 4.0 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

4
Patch available
Apr 16, 2026 - 05:29 EUVD
22.4R3-S8,24.4R2-S1,25.2R2-EVO
EUVD ID Assigned
Apr 09, 2026 - 22:22 euvd
EUVD-2026-21196
Analysis Generated
Apr 09, 2026 - 22:22 vuln.today
CVE Published
Apr 09, 2026 - 22:16 nvd
MEDIUM 6.8

DescriptionCVE.org

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information.

A local user with low privileges can execute the CLI command 'show mgd' with specific arguments which will expose sensitive information.

This issue affects

Junos OS:

  • all versions before 22.4R3-S8,
  • 23.2 versions before 23.2R2-S6,
  • 23.4 versions before 23.4R2-S6,
  • 24.2 versions before 24.2R2-S4,
  • 24.4 versions before 24.4R2-S1,
  • 25.2 version before 25.2R1-S2, 25.2R2;

Junos OS Evolved:

  • all versions before 23.2R2-S6-EVO,
  • 23.4 version before 23.4R2-S6-EVO,
  • 24.2 version before 24.2R2-S4-EVO,
  • 24.4 versions before 24.4R2-S1-EVO,
  • 25.2 versions before 25.2R2-EVO.

AnalysisAI

Missing authorization in Juniper Networks Junos OS and Junos OS Evolved CLI allows local users with low privileges to execute the 'show mgd' command with specific arguments to read sensitive information. The vulnerability affects multiple version branches of both Junos OS (22.4, 23.2, 23.4, 24.2, 24.4, 25.2) and Junos OS Evolved (23.2, 23.4, 24.2, 24.4, 25.2), with patches available for all affected versions. CVSS score is 6.8 with high confidentiality impact but no public exploit identified at time of analysis.

Technical ContextAI

This vulnerability stems from inadequate access control enforcement in the Junos OS management daemon (mgd) CLI interface, classified under CWE-862 (Missing Authorization). The issue allows local users with low privilege levels to bypass authorization checks and access sensitive information through CLI command execution. The vulnerability specifically affects the 'show mgd' command parser, which fails to properly validate user permissions before exposing restricted data. This is a local attack vector requiring shell access to the device but not requiring elevated (root/admin) privileges, making it accessible to standard unprivileged system users or service accounts with low-level access. Affected products include Juniper Junos OS running on various hardware platforms and Junos OS Evolved (the cloud and virtualized variant of the operating system).

RemediationAI

Vendor-released patches are available for all affected versions: upgrade Junos OS to 22.4R3-S8 or later for the 22.4 branch, 23.2R2-S6 or later for 23.2, 23.4R2-S6 or later for 23.4, 24.2R2-S4 or later for 24.2, 24.4R2-S1 or later for 24.4, and 25.2R1-S2 or 25.2R2 for the 25.2 branch; similarly upgrade Junos OS Evolved to the corresponding -EVO versions. Consult the official Juniper advisory at https://kb.juniper.net/JSA107866 for detailed upgrade procedures, compatibility notes, and any interim mitigations. Until patches can be applied, restrict local shell access to trusted administrators only and audit existing local user accounts for necessity.

More in Juniper

View all
CVE-2015-7755 CRITICAL POC
9.8 Dec 19

Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r
CVE-2016-1285 MEDIUM
6.8 Mar 09

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fe
CVE-2016-1286 HIGH
8.6 Mar 09

named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (
CVE-2025-21590 MEDIUM
6.7 Mar 12

A security vulnerability in An Improper (CVSS 6.7) that allows a local attacker with high privileges. Risk factors: acti
CVE-2023-36845 CRITICAL POC
9.8 Aug 17

A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series all
CVE-2022-42889 CRITICAL POC
9.8 Oct 13

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. Rated
CVE-2013-6618 CRITICAL POC
9.0 Nov 05

jsdm/ajax/port.php in J-Web in Juniper Junos before 10.4R13, 11.4 before 11.4R7, 12.1 before 12.1R5, 12.2 before 12.2R3,
CVE-2017-10622 CRITICAL
9.8 Oct 13

An authentication bypass vulnerability in Juniper Networks Junos Space Network Management Platform may allow a remote un
CVE-2021-39534 HIGH POC
8.8 Sep 20

An issue was discovered in libslax through v0.22.1. Rated high severity (CVSS 8.8), this vulnerability is remotely explo
CVE-2021-39533 HIGH POC
8.8 Sep 20

An issue was discovered in libslax through v0.22.1. Rated high severity (CVSS 8.8), this vulnerability is remotely explo
CVE-2021-39531 HIGH POC
8.8 Sep 20

An issue was discovered in libslax through v0.22.1. Rated high severity (CVSS 8.8), this vulnerability is remotely explo
CVE-2018-20193 HIGH POC
8.8 Dec 21

Certain Secure Access SA Series SSL VPN products (originally developed by Juniper Networks but now sold and supported by

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

EUVD-2026-21196 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy