CVE-2026-101956— Junos OS: Unauthorized root command execution when J-Web is enabled
Quick assessment
Affected
Juniper Networks Junos OS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Juniper Networks Junos OS 中 J-Web 网络管理组件存在一个不当的身份验证漏洞，该漏洞允许远程未认证攻击者通过暴露的 J-Web 网络界面，以 root 权限执行任意 Junos 命令。
Affected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Juniper Networks | Junos OS | 25.2< 25.2R2-S2 |
affected |
25.4< 25.4R1-S3 |
affected | ||
26.2< 26.2R1-S2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-101956
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Junos OS: Unauthorized root command execution when J-Web is enabled
Source: CVE Program / CVE List V5
Vulnerability Description
An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the exposed J-Web web interface.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Juniper Networks | Junos OS | 25.2 ~ 25.2R2-S2 | - |
|
II. Public POCs for CVE-2026-101956
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-101956
请登录查看更多情报信息。
Other References for CVE-2026-101956 (1)
-
Article Detail vendor-advisory
Same Patch Batch · Juniper Networks · 2026-10-14 · 153 CVEs total
| CVE-2026-101986 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution |
| CVE-2026-33792 | 9.8 CRITICAL | Junos OS: SRX Series: An attacker causes remote code execution and denial of service when |
| CVE-2026-102031 | 9.8 CRITICAL | Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authori |
| CVE-2026-33796 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP r |
| CVE-2026-33789 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a speci |
| CVE-2026-101950 | 9.8 CRITICAL | Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Se |
| CVE-2026-101980 | 9.8 CRITICAL | Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Ech |
| CVE-2026-101954 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover |
| CVE-2026-102182 | 9.8 CRITICAL | Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution |
| CVE-2026-102178 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malform |
| CVE-2026-101990 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re |
| CVE-2026-102175 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of servi |
| CVE-2026-101982 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise wh |
| CVE-2026-101983 | 9.8 CRITICAL | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual |
| CVE-2026-102176 | 8.8 HIGH | Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the S |
| CVE-2026-102061 | 8.8 HIGH | Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provi |
| CVE-2026-102174 | 8.8 HIGH | Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of serv |
| CVE-2026-102055 | 8.8 HIGH | Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execu |
| CVE-2026-102015 | 8.8 HIGH | Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authenti |
| CVE-2026-102059 | 8.8 HIGH | Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server caus |
Showing top 20 of 153 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Junos OS
-
CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network acces -
CVE-2026-101952
Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update -
CVE-2026-101949
Junos OS and Junos OS Evolved: In a scenario with VPN-flowsp -
CVE-2026-101964
Junos OS and Junos OS Evolved: An attacker can cause an rpd -
CVE-2026-101963
Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an
Same vendor: Juniper Networks
-
CVE-2026-101954
Junos OS and Junos OS Evolved: Unauthenticated network acces -
CVE-2026-101952
Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update -
CVE-2026-101949
Junos OS and Junos OS Evolved: In a scenario with VPN-flowsp -
CVE-2026-101964
Junos OS and Junos OS Evolved: An attacker can cause an rpd -
CVE-2026-101963
Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an
Same weakness: CWE-287
-
CVE-2026-57183
Scoold: Forged JWT Accepted as Admin API Token Allowing Unau -
CVE-2026-102631
authd: Account takeover via username fallback in identity ma -
CVE-2026-45451
Unitronics - CWE-287: Improper Authentication -
CVE-2026-110864
Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass -
CVE-2026-110863
Better Auth @better-auth/sso before 1.7.3 Authentication Byp
V. Comments for CVE-2026-101956
No comments yet