CVE-2026-101954
CRITICAL
NVD
CVSS Score
9.8
Severity
CRITICAL
Published
Oct 14, 2026
Vendor
unknown
Description
An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.