CVE-2026-21904: Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection

Published Apr 9, 2026
·
Updated

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the

list filter field that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator.

This issue affects all versions of Junos Space before 24.1R5 Patch V3.

Affected Software

68 affected components
Juniper Networks Junos Space<24.1R5 Patch V3
Juniper Junos Space=1.0
Juniper Junos Space=1.1
Juniper Junos Space=1.2
Juniper Junos Space=1.3
Juniper Junos Space=1.4
Juniper Junos Space=2.0
Juniper Junos Space=11.1
Juniper Junos Space=11.2
Juniper Junos Space=11.3
Juniper Junos Space=11.4
Juniper Junos Space=12.1
Juniper Junos Space=12.2
Juniper Junos Space=12.3
Juniper Junos Space=13.1
Juniper Junos Space=13.1-r1.8
Juniper Junos Space=13.3-r1
Juniper Junos Space=13.3-r1.1
Juniper Junos Space=13.3-r1.2
Juniper Junos Space=13.3-r1.3
Juniper Junos Space=13.3-r1.4
Juniper Junos Space=13.3-r1.5
Juniper Junos Space=13.3-r1.6
Juniper Junos Space=13.3-r1.7
Juniper Junos Space=13.3-r1.8
Juniper Junos Space=13.3-r1.9
Juniper Junos Space=13.3-r2
Juniper Junos Space=13.3-r3
Juniper Junos Space=13.3-r4
Juniper Junos Space=14.1
Juniper Junos Space=14.1-r1
Juniper Junos Space=14.1-r2
Juniper Junos Space=14.1-r3
Juniper Junos Space=15.1
Juniper Junos Space=15.1-r2
Juniper Junos Space=15.1-r3
Juniper Junos Space=15.1-r4
Juniper Junos Space=15.2
Juniper Junos Space=15.2-r2
Juniper Junos Space=16.1
Juniper Junos Space=16.1
Juniper Junos Space=16.1-r1
Juniper Junos Space=16.1-r2
Juniper Junos Space=16.1-r3
Juniper Junos Space=16.1r3
Juniper Junos Space=17.1
Juniper Junos Space=17.1-r1
Juniper Junos Space=17.2
Juniper Junos Space=17.2-r1.4
Juniper Junos Space=18.1
Juniper Junos Space=18.1r1
Juniper Junos Space=18.2
Juniper Junos Space=18.3
Juniper Junos Space=18.4
Juniper Junos Space=19.1
Juniper Junos Space=20.3-r1
Juniper Junos Space=21.1-r1
Juniper Junos Space=21.2-r1
Juniper Junos Space=21.3-r1
Juniper Junos Space=22.1-r1
Juniper Junos Space=22.2-r1
Juniper Junos Space=22.3-r1
Juniper Junos Space=23.1-r1
Juniper Junos Space=24.1-r1
Juniper Junos Space=24.1-r2
Juniper Junos Space=24.1-r3
Juniper Junos Space=24.1-r4
Juniper Junos Space=24.1-r5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Juniper Networks Junos Space to a version that resolves this vulnerability.

    Fixed in 24.1R5 Patch V3
  2. Configuration

    Ensure the ilpFilter field on nLegacy.jsp properly neutralizes user-supplied content during web page generation to prevent reflected cross-site scripting.

    Junos Space (nLegacy.jsp) ilpFilter field = Sanitize/neutralize input to prevent reflected cross-site script injection (e.g., prevent script-tag injection)

Event History

Apr 9, 2026
CVE Published
via MITRE·09:26 PM
Data Sourced
via MITRE·09:26 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-21904?

CVE-2026-21904 has a medium severity rating of 5.1.

2

What type of vulnerability is CVE-2026-21904?

CVE-2026-21904 is a reflected cross-site scripting (XSS) vulnerability.

3

How do I fix CVE-2026-21904?

To resolve CVE-2026-21904, upgrade to Junos Space 24.1R5 Patch V3 or any subsequent release.

4

Who is affected by CVE-2026-21904?

CVE-2026-21904 affects users of Juniper Networks Junos Space software.

5

What can an attacker do with CVE-2026-21904?

An attacker can use CVE-2026-21904 to inject script tags that allow them to execute commands on behalf of another user.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203