Juniper issues emergency patch for critical PTX router RCE
Juniper released an emergency patch for Junos OS Evolved to fix CVE-2026-21902, a critical RCE flaw affecting PTX routers. Juniper Networks issued an out-of-band security update for Junos OS Evolved to address a critical remote code execution vulnerability, tracked as CVE-2026-21902 (CVSS score of 9.3), impacting PTX routers. The company urges customers to apply the […]
ShinyHunters leaked the full Odido dataset
Claude code abused to steal 150GB in cyberattack on Mexican agencies
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 86
CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances
Security Affairs newsletter Round 565 by Pierluigi Paganini – INTERNATIONAL EDITION
Canadian Tire 2025 data breach impacts 38 million users
Microsoft warns of RAT delivered through trojanized gaming utilities
Aeternum botnet hides commands in Polygon smart contracts
iPhone and iPad are the first consumer devices cleared for NATO ‘RESTRICTED’ classification
Juniper issues emergency patch for critical PTX router RCE
How AI Aids Incident Response: Why Humans Alone Cannot Do IR Efficiently
12 Million exposed .env files reveal widespread security failures
ManoMano data breach impacted 38 Million customer accounts
Trend Micro fixes two critical flaws in Apex One
UAT-10027 campaign hits U.S. education and healthcare with stealthy Dohdoor backdoor
U.S. CISA adds Cisco SD-WAN flaws to its Known Exploited Vulnerabilities catalog
Hackers abused Cisco SD-WAN zero-day since 2023 to gain full admin control
Google GTIG disrupted China-linked APT UNC2814 halting attacks on 53 orgs in 42 countries
Untrusted repositories turn Claude code into an attack vector
ShinyHunters cyberattack on CarGurus impacts 12.4 Million users
- Juniper issues emergency patch for critical PTX router RCE
Juniper issues emergency patch for critical PTX router RCE
** Pierluigi Paganini
** February 27, 2026
Juniper released an emergency patch for Junos OS Evolved to fix CVE-2026-21902, a critical RCE flaw affecting PTX routers.
Juniper Networks issued an out-of-band security update for Junos OS Evolved to address a critical remote code execution vulnerability, tracked as CVE-2026-21902 (CVSS score of 9.3), impacting PTX routers.
The company urges customers to apply the patch promptly to protect network infrastructure from potential exploitation.
The flaw resides in the On-Box Anomaly Detection framework of Junos OS Evolved on PTX Series routers and lets unauthenticated remote attackers execute code as root. The service, enabled by default, should be restricted to internal processes but can be accessed externally due to incorrect permissions, allowing full device takeover.
“An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated, network-based attacker to execute code as root.
[...]