CVE-2026-33786: Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-09 · updated 2026-10-26
Weakness: CWE-754

Description

An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300 and SRX4300 allows a local attacker with low privileges to cause a complete Denial of Service (DoS). When a specific 'show chassis' CLI command is executed, chassisd crashes and restarts which causes a momentary impact to all traffic until all modules are online again. This issue affects Junos OS on SRX1600, SRX2300 and SRX4300: * 24.4 versions before 24.4R1-S3, 24.4R2. This issue does not affect Junos OS versions before 24.4R1.

Affected products

Juniper Junos OS: 24.4, 24.4-r1, 24.4-r1-s2, 24.4-r2

References

https://kb.juniper.net/JSA107810

Get alerted when CVE-2026-33786 or the next vulnerability affects your stack