CVE-2026-21916
Gravedad CVSS v4.0:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
09/04/2026
Última modificación:
09/04/2026
Descripción
*** Pendiente de traducción *** A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system.<br />
<br />
When after a user has performed a specific &#39;file link ...&#39; CLI operation, another user commits (unrelated configuration changes), the first user can login as root.<br />
<br />
This issue affects Junos OS:<br />
* all versions before 23.2R2-S7,<br />
* 23.4 versions before 23.4R2-S6,<br />
* 24.2 versions before 24.2R2-S3,<br />
* 24.4 versions before 24.4R2-S2,<br />
* 25.2 versions before 25.2R2.<br />
<br />
<br />
This issue does not affect versions 25.4R1 or later.
Impacto
Puntuación base 4.0
7.00
Gravedad 4.0
ALTA
Puntuación base 3.x
7.30
Gravedad 3.x
ALTA