CVE-2026-33776: Missing Authorization in Juniper Junos OS

The primary impact of CVE-2026-33776 is the unauthorized disclosure of sensitive information. A low-privilege local user can leverage the 'show mgd' CLI command with specific arguments to extract this data. The exact nature of the sensitive information exposed is not detailed in the description, but the potential for data leakage is significant. This could include configuration details, credentials, or other proprietary data, depending on the system's configuration. While the vulnerability requires local access, a compromised account or physical access to the device could be exploited to gain this foothold. The blast radius is limited to the affected device, but the information exposed could be used for further attacks or to compromise other systems within the network.

1. Reserved2026-03-23
2. Published2026-04-09
3. Modified2026-04-10
4. EPSS updated2026-04-17

The primary mitigation for CVE-2026-33776 is to upgrade to the fixed version, 25.2R2-EVO for Junos OS Evolved. If an immediate upgrade is not feasible, consider implementing temporary workarounds. Restricting CLI access to authorized personnel and implementing strict access controls can limit the potential for exploitation. Monitoring the 'show mgd' command for unusual activity can provide early detection of potential attacks. While a direct WAF rule is unlikely to be effective, reviewing and hardening CLI configurations is recommended. After upgrading, confirm the fix by attempting to execute the vulnerable 'show mgd' command with unauthorized credentials; the command should be denied.