CVE-2026-33788

CVE-2026-33788 is a missing authentication vulnerability in Juniper Networks Junos OS Evolved affecting PTX Series routers equipped with specific line card modules (JNP10K-LC1201 or JNP10K-LC1202). The vulnerability allows authenticated local users with low privileges to bypass authentication controls and gain unauthorized access to Flexible PIC Concentrators (FPCs) as a high-privileged user. This affects multiple PTX models and numerous software versions across the 21.2 through 23.2 release lines. The vulnerability carries a CVSS score of 7.8 (HIGH) with a local attack vector requiring low-level authentication. The attack has low complexity and requires no user interaction, resulting in high confidentiality, integrity, and availability impacts. Successful exploitation could lead to complete compromise of the affected FPC component and potentially the broader network infrastructure. The vulnerability is not currently listed on CISA's Known Exploited Vulnerabilities catalog, indicating no active exploitation in the wild at this time. Exploit code availability has not been reported, and community attention remains minimal based on the inactive hot list status. However, organizations running the affected Junos OS Evolved versions should implement available patches prioritized by their release timeline to mitigate potential future risks.