Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
ジュニパーネットワークスがJunos OSの重大(Critical)な脆弱性10件を修正。うち8件はCVSSスコア9.8。CVE-2026-101954、CVE-2026-101986及びCVE-2026-101983はJ-Webからの無認証機器奪取。CVE-2026-33796はrpd、CVE-2026-102175sdxdでの無認証機器奪取。 https://securityonline.info/juniper-patches-critical-junos-os-vulnerabilities/
🚨 Juniper Junos OS — 7 CVEs, All CVSS 9.8 Two unauthenticated: CVE-2026-102175 (heap overflow, sdxd daemon) + CVE-2026-101954 (J-Web/NETCONF auth bypass) CVE-2026-102031: TACACS low-priv → root 🔗 https://threataft.com/articles/juniper-junos-os-cluster-cve-2026-102175-101954-102031 #Juniper #JunosOS #CVE #Infosec #CyberSecurity
Review the latest Juniper security bulletin to patch critical Junos OS vulnerabilities, including RCE flaws CVE-2026-102182 and CVE-2026-101954. #JuniperNetworks #JunosOS #JunosOSEvolved #Cybersecurity #Vulnerability #NetworkSecurity #InfoSec https://securityonline.info/juniper-patches-critical-junos-os-vulnerabilities/