Vulnerability · Published Oct 14, 2026 · Assigned by juniper

CVE-2026-101954Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

Critical 9.8

In plain English

A critical-severity improper authentication in Junos OS from Juniper Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)0.5%top 58.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.

Affected products (as reported)

Vendor	Product	Versions
Juniper Networks	Junos OS	25.2 – before 25.2R2-S225.4 – before 25.4R1-S326.2 – before 26.2R1-S2
Juniper Networks	Junos OS Evolved	25.2 – before 25.2R2-S2-EVO25.4 – before 25.4R1-S3-EVO26.2 – before 26.2R1-S2-EVO23.4X10025.2X100 – before 25.2X100-D35-EVO25.4X300 – before 25.4X300-D40-EVO

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://supportportal.juniper.net/JSA112187 vendor-advisory