Juniper Networks Jsi Lwc vulnerabilities

CVE-2026-33784 [CRITICAL] CWE-1393 CVE-2026-33784: A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual L A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change of this password is not enforced during the prov

CVE-2026-21915 [MEDIUM] CWE-183 CVE-2026-21915: A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JS A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell command injection. These shell commands are exec