Description
An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. When an SRX device is provisioned to connect to Security Director (SD) cloud, it doesn't perform sufficient verification of the received server certificate. This allows a PITM to intercept the communication between the SRX and SD cloud and access credentials and other sensitive information. This issue affects Junos OS: * all versions before 22.4R3-S9, * 23.2 versions before 23.2R2-S6, * 23.4 versions before 23.4R2-S7, * 24.2 versions before 24.2R2-S3, * 24.4 versions before 24.4R2-S2, * 25.2 versions before 25.2R1-S2, 25.2R2.
INFO
Published Date :
2026-04-09T21:30:56.635Z
Last Modified :
2026-04-09T21:30:56.635Z
Source :
juniper
AFFECTED PRODUCTS
The following products are affected by CVE-2026-33779 vulnerability.
| Vendors | Products |
|---|---|
| Juniper Networks |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-33779.
| URL | Resource |
|---|---|
| https://kb.juniper.net/JSA107823 |
|