Detections
Analytics
Juniper Junos OS Multiple Vulnerabilities (JSA112188)
critical Nessus Plugin ID 372460
Synopsis
The remote device is missing a vendor-supplied security patch.Description
The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA112188 advisory.- An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash. (CVE-2026-101980)
- An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the exposed J-Web web interface. This issue affects Junos OS 25.2 and later. (CVE-2026-101956)
- A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response. (CVE-2026-102014)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Apply the relevant Junos software release referenced in Juniper advisory JSA112188See Also
Plugin Details
Severity: Critical
ID: 372460
File Name: juniper_jsa112188.nasl
Version: 1.2
Type: Combined
Family: Junos Local Security Checks
Published: 10/27/2026
Updated: 10/28/2026
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.5
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2026-101980
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: Critical
Base Score: 9.3
Threat Score: 8.1
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L
Vulnerability Information
CPE: cpe:/o:juniper:junos
Required KB Items: Host/Juniper/JUNOS/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 10/14/2026
Vulnerability Publication Date: 10/14/2026
Reference Information
CVE: CVE-2026-101956, CVE-2026-101973, CVE-2026-101980, CVE-2026-102014, CVE-2026-102048, CVE-2026-102057, CVE-2026-102069, CVE-2026-102070, CVE-2026-102072, CVE-2026-102176, CVE-2026-103994