Critical severity9.8NVD Advisory· Published Oct 14, 2026
CVE-2026-101954
CVE-2026-101954
Description
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.