Juniper Networks has issued an out-of-cycle security update to address a critical vulnerability in its PTX Series routers that could allow an unauthenticated attacker to gain full root-level control of the device. 

The flaw, tracked as CVE-2026-21902, carries a maximum CVSS severity score of 9.8.

Key Vulnerability Details

• Root Cause: The vulnerability stems from Incorrect Permission Assignment within the “On-Box Anomaly Detection” framework.
• Exploitation: While this service is intended only for internal processes over private routing instances, it was found to be reachable via externally exposed ports. An attacker can exploit this to execute arbitrary code as root.
• Default Status: The vulnerable service is enabled by default on affected systems, requiring no specific configuration to be at risk.
• Targeted Hardware: This issue specifically impacts PTX Series devices running certain versions of Junos OS Evolved. 

Affected Versions

• Junos OS Evolved 25.4 versions prior to 25.4R1-S1-EVO and 25.4R2-EVO.
• Standard (non-Evolved) Junos OS versions are not impacted. 

Recommendations

• Update Immediately: Administrators should upgrade to fixed releases, including 25.4R1-S1-EVO, 25.4R2-EVO, or 26.2R1-EVO.
• Restrict Access: If an immediate patch is not possible, ensure that management interfaces are isolated and not exposed to the public internet. 

Juniper’s Security Incident Response Team (SIRT) stated in their official security bulletin that they are not yet aware of any malicious exploitation in the wild. Further coverage of the threat is available via BleepingComputer.