CVE-2026-33788: Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs
A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device.
A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead to a full compromise of the affected component.
This issue affects Junos OS Evolved on PTX10004, PTX10008, PTX100016, with JNP10K-LC1201 or JNP10K-LC1202:
All versions before 21.2R3-S8-EVO, 21.4-EVO versions before 21.4R3-S7-EVO, 22.2-EVO versions before 22.2R3-S4-EVO, 22.3-EVO versions before 22.3R3-S3-EVO, 22.4-EVO versions before 22.4R3-S2-EVO, 23.2-EVO versions before 23.2R2-EVO.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 21.2R3-S8-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 21.4R3-S7-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.2R3-S4-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.3R3-S3-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 22.4R3-S2-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 23.2R2-EVO - Upgrade
Upgrade
Juniper Networks Junos OS Evolvedto a version that resolves this vulnerability.Fixed in 23.4R1-EVO
Event History
Frequently Asked Questions
What is the severity of CVE-2026-33788?
CVE-2026-33788 is a critical vulnerability that allows local, authenticated attackers to gain privileged access, potentially compromising the system's security.
How do I fix CVE-2026-33788?
To fix CVE-2026-33788, update Junos OS Evolved to the patched versions specified by Juniper Networks, ensuring to follow their official guidelines.
Who is affected by CVE-2026-33788?
CVE-2026-33788 affects users of Juniper Networks Junos OS Evolved on PTX Series devices, specifically those running vulnerable versions listed by the vendor.
What kind of access can be gained through CVE-2026-33788?
An attacker exploiting CVE-2026-33788 can gain privileged access to Flexible PIC Concentrators (FPCs) from a local system.
Is authentication required to exploit CVE-2026-33788?
Yes, CVE-2026-33788 requires the attacker to be a local, authenticated user with low privileges to exploit the vulnerability.