An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root.
The On-Box Anomaly detection framework should only be reachable by other internal processes over the internal routing instance, but not over an externally exposed port. With the ability to access and manipulate the service to execute code as root a remote attacker can take complete control of the device.
Please note that this service is enabled by default as no specific configuration is required.
This issue affects Junos OS Evolved on PTX Series:
* 25.4 versions before 25.4R1-S1-EVO, 25.4R2-EVO.
This issue does not affect Junos OS Evolved versions before 25.4R1-EVO.
This issue does not affect Junos OS.
References
| Link | Resource |
|---|---|
| https://kb.juniper.net/JSA107128 | Mitigation Vendor Advisory |
| https://supportportal.juniper.net/JSA107128 | Mitigation Vendor Advisory |
| https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
30 Mar 2026, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://kb.juniper.net/JSA107128 - Mitigation, Vendor Advisory | |
| References | () https://supportportal.juniper.net/JSA107128 - Mitigation, Vendor Advisory | |
| References | () https://github.com/watchtowrlabs/watchTowr-vs-JunosEvolved-CVE-2026-21902/blob/main/watchTowr-vs-JunosEvolved-CVE-2026-21902.py - Product | |
| First Time |
Juniper
Juniper ptx10003 Juniper junos Os Evolved Juniper ptx10001-36mr Juniper ptx10004 Juniper ptx10002-36qdd Juniper ptx10008 Juniper ptx10016 |
|
| CPE | cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:ptx10002-36qdd:-:*:*:*:*:*:*:* cpe:2.3:o:juniper:junos_os_evolved:25.4:r1:*:*:*:*:*:* cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:* cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:* |
Information
Published : 2026-02-25 18:23
Updated : 2026-03-30 15:16
NVD link : CVE-2026-21902
Mitre link : CVE-2026-21902
CVE.ORG link : CVE-2026-21902
JSON object : View
Products Affected
juniper
- ptx10016
- ptx10002-36qdd
- ptx10001-36mr
- ptx10003
- ptx10008
- junos_os_evolved
- ptx10004
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource