OS Command Injection Vulnerability in Juniper Networks Junos OS Evolved
CVE-2026-101967

9.3CRITICAL

Key Information:

Vendor

Juniper Networks
Status
Junos Os Evolved
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-101967?

The OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved can be exploited by an unauthenticated attacker on the management LAN. By sending a specially crafted DHCP response, an attacker is able to execute commands with root privileges, posing significant risks to the network's security and stability.

Affected Version(s)

Junos OS Evolved 24.4 < 24.4R2-S5-EVO

Junos OS Evolved 25.2 < 25.2R2-S2-EVO

Junos OS Evolved 25.4 < 25.4R1-S3-EVO

References

https://supportportal.juniper.net/JSA112250
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.