CVE-2026-101978
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-78
Impact
Unauthenticated attackers on the local management network can execute arbitrary commands as root on the target device. They only need adjacent network access to deliver a malicious gRPC response to the provisioning daemon.
Root cause
Improper input sanitization in the bootzd zero-touch provisioning daemon leads to OS command injection when parsing gRPC responses.
Affected systems
Juniper Networks Junos OS Evolved on PTX Series (exact versions not listed in the feed — check advisory JSA112250).
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the fixed Junos OS Evolved release specified in Juniper advisory JSA112250. If patching immediately is not possible, restrict or isolate management network access to prevent untrusted adjacent systems from sending gRPC traffic to the device.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted gRPC response.