CVE-2026-33776

CWE-862 — Missing Authorization3 documents3 sources

Severity

6.8MEDIUM

EPSS

0.0%

top 98.56%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Juniper Networks Junos OS Juniper Networks Junos OS Evolved

Timeline

PublishedApr 9

Latest updateApr 10

Description

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. A local user with low privileges can execute the CLI command 'show mgd' with specific arguments which will expose sensitive information. This issue affects Junos OS: * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S6, * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.…

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5juniper_networks/junos_os_evolved23.4 — 23.4R2-S6-EVO+4

▶CVEListV5juniper_networks/junos_os23.2 — 23.2R2-S6+5

🔴Vulnerability Details

GHSA

GHSA-cp8x-pvqx-wpcc: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sen↗2026-04-10

▶

CVEList

Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information↗2026-04-09

▶