https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:07:36.268776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0408 certfr-2026-avi-0408 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-02T19:07:36.273636+00:00 certfr-2026-avi-0408 https://cve.radiocsirt.org/vuln/euvd-2026-290949 EUVD-2026-290949 2026-10-02T19:07:36.273691+00:00 EUVD-2026-290949 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33784 fkie_cve-2026-33784 2026-10-02T19:07:36.273714+00:00

A Use of Default Password vulnerability in the Juniper Networks

Support Insights (JSI)

Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device.

vLWC software images ship with an initial password for a high privileged account. A change of this password is not enforced during the provisioning of the software, which can make full access to the system by unauthorized actors possible.This issue affects all versions of vLWC before 3.0.94.

 https://cve.radiocsirt.org/vuln/ghsa-g6hm-r7f2-4j2f GHSA-g6hm-r7f2-4j2f 2026-10-02T19:07:36.273776+00:00

A Use of Default Password vulnerability in the Juniper Networks

Support Insights (JSI)

Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device.

vLWC software images ship with an initial password for a high privileged account. A change of this password is not enforced during the provisioning of the software, which can make full access to the system by unauthorized actors possible.This issue affects all versions of vLWC before 3.0.94.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1022 WID-SEC-W-2026-1022 — Juniper Patchday April 2026: Mehrere Schwachstellen 2026-10-02T19:07:36.273818+00:00

Ein Angreifer kann mehrere Schwachstellen in Juniper Apstra, Junos OS, Junos OS Evolved und Junos Space ausnutzen, um erweiterte Berechtigungen – sogar Root-Rechte – zu erlangen, beliebigen Code auszuführen – auch mit erweiterten Berechtigungen –, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Cross-Site-Scripting-Angriffe durchzuführen oder Daten zu manipulieren.