Juniper Security Updates – 09 April 2026

Juniper Networks has released security updates to address several vulnerabilities affecting multiple Juniper products.

The addressed vulnerabilities could allow the attacker to gain elevated privileges, bypass security restrictions, obtain sensitive information, perform denial-ofservice attacks, conduct cross-site scripting attacks, or execute arbitrary commands and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Juniper Virtual Lightweight Collector Default Password Vulnerability (CVE- 2026-33784):

  • CVSS: 9.8
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Gain Access

2. Juniper Junos OS: SRX Series srxpfe Process Crash Vulnerability (CVE-2026- 33790):

  • CVSS: 7.5
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Denial of Service

Sample of the affected products:

  • Junos OS and Junos OS Evolved.
  • Juniper Apstra.
  • Juniper vLWC.
Vulnerabilities
Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Juniper Security Advisory

References