VulnSocial

CVE-2026-21916Disclosure(juniper / junos)

LOWCVSS 7.0 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file link ...' CLI operation, another user commits (unrelated configuration changes), the first user can login as root. This issue affects Junos OS: * all versions before 23.2R2-S7, * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S3, * 24.4 versions before 24.4R2-S2, * 25.2 versions before 25.2R2. This issue does not affect versions 25.4R1 or later.

juniper CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-61

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • junos

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
juniper
Products
junos

5 versions affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-09: 2Technical Details · 2026-04-09: 204-09
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-21916 A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate … https://www.cve.org/CVERecord?id=CVE-2026-21916

    Post summary

    The post announces CVE-2026-21916, detailing a local privilege‑escalation flaw in Juniper's Junos OS via symbolic link following in the CLI, with no PoC, exploit code, active exploitation, or patch mentioned.

    00010160
    57.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-21916 A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate … https://www.cve.org/CVERecord?id=CVE-2026-21916 ----- Traducción: CVE-2026-21916 Una… http://infoflow.cloud`

    Post summary

    The post announces a new local privilege escalation vulnerability (CVE‑2026‑21916) in Juniper Junos OS involving symlink following, but does not provide a PoC, exploit code, or patch information, nor evidence of active exploitation.

    0000039
    67 followersView on X
CPE platform detail39 entries

39 of 39 entries

PartVendorProductVersionTarget SWTarget HW
OSjuniperjunos---
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
OSjuniperjunos25.2--

Explore more

Back to dashboardjuniper CVEsjunos vulnerabilities