CVE-2026-33791
published 2026-04-09CVE-2026-33791: An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker…
PriorityP339medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.69%
48.7th percentile
An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system.
Certain 'set system' commands, when executed with crafted arguments, are not properly sanitized, allowing for arbitrary shell injection. These shell commands are executed as root, potentially allowing for complete control of the vulnerable system.
This issue affects:
Junos OS:
* all versions before 22.4R3-S8,
* from 23.2 before 23.2R2-S5,
* from 23.4 before 23.4R2-S7,
* from 24.2 before 24.2R2-S2,
* from 24.4 before 24.4R2,
* from 25.2 before 25.2R2;
Junos OS Evolved:
* all versions before 22.4R3-S8-EVO,
* from 23.2 before 23.2R2-S5-EVO,
* from 23.4 before 23.4R2-S7-EVO,
* from 24.2 before 24.2R2-S2-EVO,
* from 24.4 before 24.4R2-EVO,
* from 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO.
Affected
27 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | junos | < 22.4 | 22.4 |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos | — | — |
| juniper | junos_os | — | — |
| juniper | junos_os_evolved | < 22.4 | 22.4 |
| juniper | junos_os_evolved | — | — |
| juniper | junos_os_evolved | — | — |
| juniper | junos_os_evolved | — | — |
| juniper | junos_os_evolved | — | — |
| juniper | junos_os_evolved | — | — |
| juniper | junos_os_evolved | — | — |
| juniper_networks | junos_os | < 22.4R3-S8 | 22.4R3-S8 |
| juniper_networks | junos_os | >= 23.2 < 23.2R2-S5 | 23.2R2-S5 |
| juniper_networks | junos_os | >= 23.4 < 23.4R2-S7 | 23.4R2-S7 |
| juniper_networks | junos_os | >= 24.2 < 24.2R2-S2 | 24.2R2-S2 |
| juniper_networks | junos_os | >= 24.4 < 24.4R2 | 24.4R2 |
| juniper_networks | junos_os | >= 25.2 < 25.2R2 | 25.2R2 |
| juniper_networks | junos_os_evolved | < 22.4R3-S8-EVO | 22.4R3-S8-EVO |
| juniper_networks | junos_os_evolved | >= 23.2 < 23.2R2-S5-EVO | 23.2R2-S5-EVO |
| juniper_networks | junos_os_evolved | >= 23.4 < 23.4R2-S7-EVO | 23.4R2-S7-EVO |
| juniper_networks | junos_os_evolved | >= 24.2 < 24.2R2-S2-EVO | 24.2R2-S2-EVO |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv4.08.4HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:C/RE:M/U:Amber
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Juniper Junos OS/Junos OS Evolved CLI os command injection (JSA107875)
vuldb·2026-04-10·CVSS 8.4
CVE-2026-33791 [HIGH] Juniper Junos OS/Junos OS Evolved CLI os command injection (JSA107875)
A vulnerability was found in Juniper Junos OS and Junos OS Evolved. It has been classified as critical. This impacts an unknown function of the component CLI Handler. Performing a manipulation results in os command injection.
This vulnerability is cataloged as CVE-2026-33791. The attack must be initiated from a local position. There is no exploit available.
Upgrading the affected component is recommended.
GHSA
GHSA-j4rr-c2v3-296r: An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker
ghsa_unreviewed·2026-04-10
CVE-2026-33791 [HIGH] CWE-78 GHSA-j4rr-c2v3-296r: An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker
An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system.
Certain 'set system' commands, when executed with crafted arguments, are not properly sanitized, allowing for arbitrary shell injection. These shell commands are executed as root, potentially allowing for complete control of the vulnerable system.
This issue affects:
Junos OS:
* all versions before 22.4R3-S8,
* from 23.2 before 23.2R2-S5,
* from 23.4 before 23.4R2-S7,
* from 24.2 before 24.2R2-S2,
* from 24.4 before 24.4R2,
* from 25.2 before 25.2R2;
Junos OS Evolved:
* all versions before 22.4R3-S8-EVO
Juniper
CVE-2026-33791: An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker
vendor_juniper·2026-04-09·CVSS 6.7
CVE-2026-33791 [MEDIUM] CWE-78 CVE-2026-33791: An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker
CVE-2026-33791: An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system.
Certain 'set system' commands, when executed with crafted arguments, are not properly sanitized, allowing for arbitrary shell injection. These shell commands are executed as root, potentially allowing for complete control of the vulnerable system.
This issue affects:
Junos OS:
* all versions before 22.4R3-S8,
* from 23.2 before 23.2R2-S5,
* from 23.4 before 23.4R2-S7,
* from 24.2 before 24.2R2-S2,
* from 24.4 before 24.4R2,
* from 25.2 before 25.2R2;
Junos OS Evolved:
* all versions befo
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-09
Published