CVE-2026-101967
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper…
- Risk score
- 71/100
- CVSS
- 8.8 v3.1
- Exploit chance (30 days)
- 3.9%
- Published
- 14 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response.
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- Exploitation likely: EPSS 3.9% (top 10%)
References
Original description
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response.
Last activity 14 Oct 2026. Patch Forecast updates every hour.