CVE-2026-33802

Awaiting Analysis Awaiting Analysis - Queue

Missing Authorization in Juniper Junos OS CLI on EX Series

Publication date: 2026-07-09

Last updated on: 2026-07-10

Assigner: Juniper Networks, Inc.

Description

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS). On EX2300, EX4000, EX4100, EX4300-MP (Multigigabit) and EX4400 switches, an authenticated, local attacker with no specific permissions or class can execute a specific, privileged CLI 'request' command which will cause complete traffic impact until the system automatically recovers. This issue affects Junos OS on EX2300, EX4000, EX4100, EX4300-MP (Multigigabit) and EX4400: * 23.2R2 versions before 23.2R2-S6, * 23.4 versions before 23.4R2-S8, * 24.2 versions before 24.2R2-S4, * 24.4 versions before 24.4R2-S3, * 25.2 versions before 25.2R2, * 25.4 versions before 25.4R1-S1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-09

Last Modified

2026-07-10

Generated

2026-07-11

AI Q&A

2026-07-10

EPSS Evaluated

N/A

NVD

CVE-2026-33802

EUVD

EUVD-2026-42703

Affected Vendors & Products

Vendor	Product	Version / Range
juniper_networks	junos_os	to 23.2r2-s6 (exc)
juniper_networks	junos_os	to 23.4r2-s8 (exc)
juniper_networks	junos_os	to 24.2r2-s4 (exc)
juniper_networks	junos_os	to 24.4r2-s3 (exc)
juniper_networks	junos_os	to 25.2r2 (exc)
juniper_networks	junos_os	to 25.4r1-s1 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Impact Analysis

An attacker with local authenticated access but no special permissions can cause a complete Denial-of-Service on the affected Juniper EX Series switches.

This results in total traffic disruption on the device, potentially causing network outages or degraded network performance until the system recovers automatically.

Executive Summary

This vulnerability is a Missing Authorization flaw in the command-line interface (CLI) of Juniper Networks Junos OS on certain EX Series switches. It allows a local, authenticated attacker who does not have specific permissions or roles to execute a privileged CLI 'request' command.

Executing this command causes a Denial-of-Service (DoS) condition that impacts all traffic on the affected device until the system automatically recovers.

The affected devices include EX2300, EX4000, EX4100, EX4300-MP (Multigigabit), and EX4400 switches running specific versions of Junos OS prior to certain fixed releases.

Hi! I’m here to help you understand CVE-2026-33802. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70