CVE-2026-33779

HIGH EPSS 2.3%
Published Apr 9, 20262mo ago · Modified Jun 17, 20261w ago
8.3 CVSS 4.0
High
Find Similar
Published Apr 9, 2026 2mo ago
Last Modified Jun 17, 2026 1w ago

Description

An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect to Security Director (SD) cloud, it doesn't perform sufficient verification of the received server certificate. This allows a PITM to intercept the communication between the SRX and SD cloud and access credentials and other sensitive information. This issue affects Junos OS: * all versions before 22.4R3-S9, * 23.2 versions before 23.2R2-S6, * 23.4 versions before 23.4R2-S7, * 24.2 versions before 24.2R2-S3, * 24.4 versions before 24.4R2-S2, * 25.2 versions before 25.2R1-S2, 25.2R2.

CVSS Details

Base Score
8.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:X
Attack Vector Network
Attack Complexity High
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
2.3% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-296

Affected Products 72

VendorProductVersionRange
juniperjunos* <22.4
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos22.4any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.2any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos23.4any
juniperjunos24.2any
juniperjunos24.2any
juniperjunos24.2any
juniperjunos24.2any
juniperjunos24.2any
juniperjunos24.2any
juniperjunos24.2any
juniperjunos24.4any
juniperjunos24.4any
juniperjunos24.4any
juniperjunos24.4any
juniperjunos24.4any
juniperjunos24.4any
juniperjunos25.2any
juniperjunos25.2any
juniperjunos25.2any
juniperjunos25.2any
junipersrx1500*any
junipersrx1600*any
junipersrx2300*any
junipersrx300*any
junipersrx320*any
junipersrx340*any
junipersrx345*any
junipersrx380*any
junipersrx4100*any
junipersrx4120*any
junipersrx4200*any
junipersrx4300*any
junipersrx4600*any
junipersrx4700*any
junipersrx5400*any
junipersrx5600*any
junipersrx5800*any

References 1

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.