VulnSocial

CVE-2026-33779Disclosure(juniper / junos)

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect to Security Director (SD) cloud, it doesn't perform sufficient verification of the received server certificate. This allows a PITM to intercept the communication between the SRX and SD cloud and access credentials and other sensitive information. This issue affects Junos OS: * all versions before 22.4R3-S9, * 23.2 versions before 23.2R2-S6, * 23.4 versions before 23.4R2-S7, * 24.2 versions before 24.2R2-S3, * 24.4 versions before 24.4R2-S2, * 25.2 versions before 25.2R1-S2, 25.2R2.

juniper CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-296

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • junos
  • srx1500
  • srx1600
  • srx2300

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
juniper
Products
junossrx1500srx1600srx2300srx300srx320srx340srx345srx380srx4100

7 versions affected across 18 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-04-09: 1Technical Details · 2026-04-09: 104-09
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • CVE@CVEnew
    Disclosure

    CVE-2026-33779 An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication… https://www.cve.org/CVERecord?id=CVE-2026-33779

    Post summary

    The text announces CVE-2026-33779, a certificate chain validation flaw in Juniper’s J-Web that could let attackers perform man‑in‑the‑middle attacks.

    00020188
    57.7K followersView on X
CPE platform detail72 entries

72 of 72 entries

PartVendorProductVersionTarget SWTarget HW
OSjuniperjunos---
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos22.4--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.2--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos23.4--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.2--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos24.4--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
OSjuniperjunos25.2--
HWjunipersrx1500---
HWjunipersrx1600---
HWjunipersrx2300---
HWjunipersrx300---
HWjunipersrx320---
HWjunipersrx340---
HWjunipersrx345---
HWjunipersrx380---
HWjunipersrx4100---
HWjunipersrx4120---
HWjunipersrx4200---
HWjunipersrx4300---
HWjunipersrx4600---
HWjunipersrx4700---
HWjunipersrx5400---
HWjunipersrx5600---
HWjunipersrx5800---

Explore more

Back to dashboardjuniper CVEsjunos vulnerabilities