Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2026-33776

Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
juniper

Description

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. A local user with low privileges can execute the CLI command 'show mgd' with specific arguments which will expose sensitive information. This issue affects Junos OS: * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S6, * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.4R2-S1, * 25.2 version before 25.2R1-S2, 25.2R2; Junos OS Evolved: * all versions before 23.2R2-S6-EVO, * 23.4 version before 23.4R2-S6-EVO, * 24.2 version before 24.2R2-S4-EVO, * 24.4 versions before 24.4R2-S1-EVO, * 25.2 versions before 25.2R2-EVO.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Juniper Networks Junos OS

Default version status: unaffected

  • 0 to < 22.4R3-S8affected
  • 23.2 to < 23.2R2-S6affected
  • 23.4 to < 23.4R2-S6affected
  • 24.2 to < 24.2R2-S4affected
  • 24.4 to < 24.4R2-S1affected
  • 25.2 to < 25.2R1-S2, 25.2R2affected

Juniper Networks Junos OS Evolved

Default version status: unaffected

  • 0 to < 23.2R2-S6-EVOaffected
  • 23.4 to < 23.4R2-S6-EVOaffected
  • 24.2 to < 24.2R2-S4-EVOaffected
  • 24.4 to < 24.4R2-S1-EVOaffected
  • 25.2 to < 25.2R2-EVOaffected

References