CVE-2026-101986

Description

An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-101986 ↗
• supportportal.juniper.net/JSA112187 ↗

Related CVEs

• CVE-2026-102037Juniper Networks / Junos OSCVSS 9.2
• CVE-2026-102031Juniper Networks / Junos OS EvolvedCVSS 9.3
• CVE-2026-101997Juniper Networks / Junos OSCVSS 9.2
• CVE-2026-101990Juniper Networks / Junos OS · +1CVSS 9.3
• CVE-2026-101980Juniper Networks / Junos OSCVSS 9.3
• CVE-2026-101967Juniper Networks / Junos OS EvolvedCVSS 9.3
• CVE-2026-101956Juniper Networks / Junos OSCVSS 9.3
• CVE-2026-101955Juniper Networks / Junos OSCVSS 9.2