{"id":"CVE-2026-101986","published":"2026-10-14T17:17:50.953","lastModified":"2026-10-15T16:24:19.073","description":"An  Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-287"],"vendors":[],"products":[],"references":[{"url":"https://supportportal.juniper.net/JSA112187","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"An unauthenticated attacker can bypass J-Web authentication and execute CGI scripts with elevated privileges by crafting specific HTTP requests. This represents a critical authentication flaw that allows remote code execution without any credentials.","exploitability":"Exploitation is straightforward requiring only a network connection to the affected J-Web interface with no prerequisites, making it highly suitable for automated attacks.","blast_radius":"The vulnerability affects all Juniper devices running J-Web with default configurations, potentially allowing attackers to gain full system control across entire networks.","remediation":"Disable J-Web service immediately or restrict access to the J-Web endpoint via network segmentation until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","web","remote-code-execution"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:50:31.870Z"}}