Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-33786

21
FAUCET Score

An improper exception handling vulnerability exists in the chassis control daemon of Juniper Networks Junos OS versions 24.4 through 24.4R2 on SRX1600, SRX2300, and SRX4300 security appliances. When a specific show chassis CLI command is executed, the vulnerable daemon crashes and restarts, causing a complete denial of service affecting all traffic until all modules are online again. The vulnerability carries a CVSS score of 5.5 (Medium severity) with a local attack vector requiring low privilege credentials and no user interaction. The attack requires local access to the device and no special configuration, making it relatively straightforward to execute for authenticated users with minimal permissions. The impact is limited to availability, with no confidentiality or integrity concerns. There is no evidence of active exploitation in the wild or public exploit code availability. The vulnerability is not tracked on the CISA Known Exploited Vulnerabilities catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.00014 indicates minimal probability of exploitation based on current threat landscape data, suggesting this remains a low-priority concern from an immediate exploitation standpoint, though administrators should still apply available patches to affected platforms.

Impacted Technologies

VendorProductVersion(s)CPE
24.4CPE matchmatch criteria
cpe:2.3:o:juniper:junos:24.4:-:*:*:*:*:*:*
24.4CPE matchmatch criteria
cpe:2.3:o:juniper:junos:24.4:r1:*:*:*:*:*:*
24.4CPE matchmatch criteria
cpe:2.3:o:juniper:junos:24.4:r1-s2:*:*:*:*:*:*
24.4CPE matchmatch criteria
cpe:2.3:o:juniper:junos:24.4:r2:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 4.0

6.8MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:X/RE:M/U:X

Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
LOW
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.10%
Probability of exploitation in next 30 days
EPSS Percentile
0.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0009 is in the 5th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

junipervendor investigatingvia vendor_rss
View patch

Vendor Advisories (2)

juniperjuniper:ka0Dp000000vDvTIAU

2026-04 Security Bulletin: Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes (CVE-2026-33786)

Apr 9, 2026
juniperjuniper:ka0Dp000000vCWvIAM

2026-04 Security Bulletin: Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes (CVE-2026-33786)

Apr 8, 2026

References

kb.juniper.net / JSA107810
MitigationVendor Advisory