CVE-2026-21902

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-21902
An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root. The On-Box Anomaly detection framework should only be reachable by other internal processes over the internal routing instance, but not over an externally exposed port. With the ability to access and manipulate the service to execute code as root a remote attacker can take complete control of the device. Please note that this service is enabled by default as no specific configuration is required. This issue affects Junos OS Evolved on PTX Series: * 25.4 versions before 25.4R1-S1-EVO, 25.4R2-EVO. This issue does not affect Junos OS Evolved versions before 25.4R1-EVO. This issue does not affect Junos OS.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://kb.juniper.net/JSA107128 Mitigation Vendor Advisory
https://supportportal.juniper.net/JSA107128 Mitigation Vendor Advisory
https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:juniper:junos_os_evolved:25.4:r1:*:*:*:*:*:*
OR cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10002-36qdd:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*
History

30 Mar 2026, 15:16

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de Asignación Incorrecta de Permisos para Recursos Críticos en el framework de detección de anomalías On-Box de Juniper Networks Junos OS Evolved en la serie PTX permite a un atacante no autenticado y basado en red ejecutar código como root. El framework de detección de anomalías On-Box solo debería ser accesible por otros procesos internos a través de la instancia de enrutamiento interna, pero no a través de un puerto expuesto externamente. Con la capacidad de acceder y manipular el servicio para ejecutar código como root, un atacante remoto puede tomar el control completo del dispositivo. Tenga en cuenta que este servicio está habilitado por defecto ya que no se requiere ninguna configuración específica. Este problema afecta a Junos OS Evolved en la serie PTX: * versiones 25.4 anteriores a 25.4R1-S1-EVO, 25.4R2-EVO. Este problema no afecta a las versiones de Junos OS Evolved anteriores a 25.4R1-EVO. Este problema no afecta a Junos OS.
CPE cpe:2.3:o:juniper:junos_os_evolved:25.4:r1:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10002-36qdd:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*
cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*
First Time Juniper
Juniper ptx10004
Juniper ptx10003
Juniper junos Os Evolved
Juniper ptx10016
Juniper ptx10001-36mr
Juniper ptx10002-36qdd
Juniper ptx10008
References () https://kb.juniper.net/JSA107128 - () https://kb.juniper.net/JSA107128 - Mitigation, Vendor Advisory
References () https://supportportal.juniper.net/JSA107128 - () https://supportportal.juniper.net/JSA107128 - Mitigation, Vendor Advisory
References () https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py - () https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py - Product

03 Mar 2026, 15:16

Type Values Removed Values Added
References
  • () https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py -

25 Feb 2026, 18:23

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-25 18:23

Updated : 2026-03-30 15:16

NVD link : CVE-2026-21902

Mitre link : CVE-2026-21902

CVE.ORG link : CVE-2026-21902

JSON object : View

Products Affected

juniper

  • ptx10002-36qdd
  • ptx10016
  • ptx10003
  • ptx10001-36mr
  • ptx10008
  • junos_os_evolved
  • ptx10004
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource