CriticalCritical vulnerability
CVE-2026-101967 (CVSS 9.3)
NVD · officialPublished Oct 14, 2026Risk 50/100
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response.
Technical details
CVSS
9.3
AV:AdjacentAC:LowPR:NoneUI:None
Evidence and sources
This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.
Open primary source