by Kastro CVE-2026-101983
Juniper Networks Junos OS — Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
Description · from the CVE record
A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.
Affected
ProductAffectedFixed inSource
Junos OS23.4 – < 23.4R2-S8.1323.4R2-S8.13CNA
Junos OS24.2 – < 24.2R2-S5.524.2R2-S5.5CNA
Junos OS24.4 – < 24.4R2-S524.4R2-S5CNA
Junos OS25.2 – < 25.2R2-S225.2R2-S2CNA
Junos OS25.4 – < 25.4R1-S325.4R1-S3CNA
Junos OS26.2 – < 26.2R1-S226.2R1-S2CNA
Junos OS Evolved23.4 – < 23.4R2-S8.11-EVO23.4R2-S8.11-EVOCNA
Junos OS Evolved24.2 – < 24.2R2-S5.6-EVO24.2R2-S5.6-EVOCNA
Junos OS Evolved24.4 – < 24.4R2-S5-EVO24.4R2-S5-EVOCNA
Junos OS Evolved25.2 – < 25.2R2-S2-EVO25.2R2-S2-EVOCNA
Junos OS Evolved25.4 – < 25.4R1-S3-EVO25.4R1-S3-EVOCNA
Junos OS Evolved26.2 – < 26.2R1-S2-EVO26.2R1-S2-EVOCNA
Scores by source
juniper (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
juniper (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total