CVE-2026-21902

CVSS

—

EPSS

0.180 (97.1th percentile)

CISA KEV

Not listed

Exploitation

No report

Public exploits

None seen

State

Unknown

Coverage

• 

  watchTowr Labs03 Mar, 14:15

  Sometimes, You Can Just Feel The Security In The Design (Juniper Junos Evolved CVE-2026-21902 Pre-Auth RCE)

  On today’s ‘good news disguised as other things’ segment, we’re turning our gaze to CVE-2026-21902 - a recently disclosed “Incorrect Permission Assignment for Critical Resource” vulnerability affecting Juniper’s Junos OS Evolved platform. This vulnerability affects only Juniper’s

  ↗labs.watchtowr.com/sometimes-you-can-just-feel-…(opens the publisher's site in a new tab)

What we observed