CVE-2026-33785 — Missing Authorization

Vendor	Product	Version range	Fixed in
juniper	junos	—	—
juniper	junos	—	—
juniper	junos_os	—	—
juniper	mx_series	—	—
juniper_networks	junos_os	>= 24.4 < 24.4R2-S3	24.4R2-S3
juniper_networks	junos_os	>= 25.2 < 25.2R2	25.2R2

VulDB

Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1 Security Distributed Service authorization (JSA107872 / Nessus ID 305592)

vuldb·2026-04-13·CVSS 6.3

CVE-2026-33785 [MEDIUM] Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1 Security Distributed Service authorization (JSA107872 / Nessus ID 305592) A vulnerability, which was classified as critical, was found in Juniper Junos OS up to 24.4R0/24.4R2-S2/25.2R1. This affects an unknown function of the component Security Distributed Service. The manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026-33785. The attack must be initiated from a local position. There is no exploit available. You should upgrade the affected component.

GHSA

GHSA-m5fr-cwvv-7qff: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to e

ghsa_unreviewed·2026-04-10

CVE-2026-33785 [MEDIUM] CWE-862 GHSA-m5fr-cwvv-7qff: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to e A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Services (CSDS) operations as they will impact all aspects of the devices managed via the respective MX. This issue affects Junos OS on MX Series: * 24.4 releases before 24.4R2-S3, * 25.2 releases before 25.2R2. This issue does not affect Junos OS releases before 24.4.

Juniper

CVE-2026-33785: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to e

vendor_juniper·2026-04-09·CVSS 8.8

CVE-2026-33785 [HIGH] CWE-862 CVE-2026-33785: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to e CVE-2026-33785: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Services (CSDS) operations as they will impact all aspects of the devices managed via the respective MX. This issue affects Junos OS on MX Series: * 24.4 releases before 24.4R2-S3, * 25.2 releases before 25.2R2. This issue does not affect Junos OS releases before 24.4.

CVE-2026-33785: A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute…

Affected

CVSS provenance