Cross-site Scripting Vulnerability in Juniper Networks Junos Space

CVE-2026-21904

What is CVE-2026-21904?

An improper neutralization of input during web page generation in Juniper Networks' Junos Space allows attackers to inject malicious script tags into the list filter field. When this page is accessed by other users, including administrators, the attacker can execute commands utilizing the permissions of the affected user. This vulnerability poses significant risks, as it enables unauthorized actions and compromises the security of the affected system.

References