Skip to content
VulniPulse
Sign in
Medium5.5Juniper Networks

Medium [CVE-2026-33802] Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS)

This medium-severity Juniper Networks advisory covers CVE-2026-33802 affecting Junos OS, Junos, EX.

CVE-2026-33802 Published Jul 9, 2026Updated by vendor Jul 14, 2026
CVE-2026-33802
Affected products & platforms
Juniper NetworksSwitchesJunosEX / QFX SwitchesEX2300
Open vendor advisory

Android app · Google Play

Monitor future Juniper Networks CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS).

On EX2300, EX4000, EX4100, EX4300-MP (Multigigabit) and EX4400 switches, an authenticated, local attacker with no specific permissions or class can execute a specific, privileged CLI 'request' command which will cause complete traffic impact until the system automatically recovers.

This issue affects Junos OS on EX2300, EX4000, EX4100, EX4300-MP (Multigigabit) and EX4400:

  • 23.2R2 versions before 23.2R2-S6,
  • 23.4 versions before 23.4R2-S8,
  • 25.4 versions before 25.4R1-S1.

Affected products named by the advisory: EX.

Affected products named by the advisory: EX.

Affected versions
  • 23.4
  • 24.2
  • 24.4
  • 25.2
  • 25.4

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions
  • 23.2R2-S6
  • 23.4R2-S8
  • 24.2R2-S4
  • 24.4R2-S3
  • 25.2R2
  • 25.4R1-S1

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation

Upgrade to a fixed release: 23.2R2-S6, 23.4R2-S8, 24.2R2-S4, 24.4R2-S3, 25.2R2, 25.4R1-S1. That is the remediation for this advisory.

The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.