Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Services (CSDS) operations as they will impact all aspects of the devices managed via the respective MX. This issue affects Junos OS on MX Series: * 24.4 releases before 24.4R2-S3, * 25.2 releases before 25.2R2. This issue does not affect Junos OS releases before 24.4.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 12 products
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure1Patch1 |
| 2026-04-10 | 1 | Disclosure1 |
| 2026-04-14 | 1 | General1 |
⚠️ Vulnerabilidades en productos Juniper Networks ❗ CVE-2026-33793 ❗ CVE-2026-33788 ❗ CVE-2026-33785 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-juniper-networks-2/ https://t.co/Z6HVR8JysF
Post summary
The post lists three Juniper Networks CVEs but provides no technical, exploit, or mitigation details.
CVE-2026-33785 A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific … https://www.cve.org/CVERecord?id=CVE-2026-33785
Post summary
The post announces a missing‑authorization vulnerability in Juniper Networks Junos OS that lets low‑privileged local users run commands, but it offers no proof‑of‑concept, exploit tools, or active exploitation evidence.
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario CVE: CVE-2026-33785 PT ID: PT-2026-31804 Vendor: Juniper networks Product: Junos OS CVSS: 8.8 Credits: n/a Description: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Services (CSDS) operations as they will impact all aspects of the devices managed via the respective MX. This issue affects Junos OS on MX Series: * 24.4 releases before 24.4R2-S3, * 25.2 releases before 25.2R2. This issue does not affect Junos OS releases before 24.4. References: • https://dbugs.ptsecurity.com/vulnerability/CVE-2026-33785 • https://kb.juniper.net/JSA107872 #dbugs_vuln
Post summary
Juniper’s Junos OS on MX Series suffers from a missing authorization flaw (CVE-2026-33785) that allows low‑privileged local users to run privileged commands, potentially leading to full device compromise.
[CVE-2026-33785: HIGH] Critical Missing Authorization vulnerability in Juniper Networks Junos OS on MX Series allows low-privileged users to compromise devices. Update to versions 24.4R2-S3 or 25.2R2 to patch.#cve,CVE-2026-33785,#cybersecurity https://cvefind.com/CVE-2026-33785
Post summary
The post highlights a critical missing authorization flaw in Juniper Junos OS and directs users to specific firmware updates to mitigate the vulnerability.
22 of 22 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 24.4 | - | - |
| OS | juniper | junos | 25.2 | - | - |
| OS | juniper | junos | 25.2 | - | - |
| OS | juniper | junos | 25.2 | - | - |
| OS | juniper | junos | 25.2 | - | - |
| HW | juniper | mx10004 | - | - | - |
| HW | juniper | mx10008 | - | - | - |
| HW | juniper | mx2008 | - | - | - |
| HW | juniper | mx2010 | - | - | - |
| HW | juniper | mx2020 | - | - | - |
| HW | juniper | mx204 | - | - | - |
| HW | juniper | mx240 | - | - | - |
| HW | juniper | mx301 | - | - | - |
| HW | juniper | mx304 | - | - | - |
| HW | juniper | mx480 | - | - | - |
| HW | juniper | mx960 | - | - | - |