EXPOSURES › CVE-2026-101954
CVE-2026-101954
CRITICALAn unauthenticated attacker can take over Juniper J-Web devices via an improper authentication flaw in the management interface.
CVE-2026-101954 allows remote attackers to bypass authentication on Juniper J-Web, gaining root access and full device control. DIBs must patch Juniper Junos OS immediately, as this flaw enables lateral movement and persistent compromise of network infrastructure. The failure stems from a design flaw in the J-Web interface, not a zero-day exploit, but its critical severity demands urgent remediation.
Shame score — A critical authentication bypass allowing full device takeover is a severe, avoidable failure that exposes network infrastructure to persistent compromise.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.