CVE-2026-33785
Severity
6.3MEDIUM
EPSS
0.0%
top 98.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 9
Latest updateApr 13
Description
A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices.
Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Ser…
CVSS vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H
Affected Packages1 packages
🔴Vulnerability Details
3VulDB▶
Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1 Security Distributed Service authorization (JSA107872 / Nessus ID 305592)↗2026-04-13
GHSA▶
GHSA-m5fr-cwvv-7qff: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to e↗2026-04-10
CVEList▶
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario↗2026-04-09