CVSS 9.8 (critical) · published 2026-10-14
An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.
Affected products (NVD): juniper junos_os_evolved, juniper junos
Weakness: CWE-287
Source: NVD CVE-2026-101986
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.