CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-33784 — A Use of Default Password vulnerability in the Juniper Networks Support Insigh...

·Source: NIST NVD

Updated:

Executive Summary

A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change of this password is not enforced during the provisioning of the software, which can make full

Analysis

A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change of this password is not enforced during the provisioning of the software, which can make full access to the system by unauthorized actors possible.This issue affects all versions of vLWC before 3.0.94. CVSS Score: 9.8. Published: 2026-04-09T22:16:27.820.

Indicators of Compromise (1)

CVE (1)
CVE-2026-33784
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Apr 9, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerability

How to Identify Compromised eMudhra Certificates With Qualys (CVE-2026-111943 and CVE-2026-111944)

Executive Summary A critical certificate authority incident disclosed on October 17, 2026, impacts eight eMudhra intermediate CA certificates. A flaw in the key generation process could allow attackers to recover private keys and issue fraudulent TLS or code-signing certificates. The affected intermediates have been revoked and blocked by major platform vendors, including Chrome, Mozilla, Apple, [

CVE-2026-111943CVE-2026-111944
Qualys Blog
LOWVulnerability

Analysts Urge US to Follow UK's Lead on Undersea Cable Law

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/analysts-urge-us-to-follow-uks-lead-on-undersea-cable-law-image_small-2-a-33198.jpg" align=right hspace=4><b>UK Proposes Crisis Powers Over Cable Operators and Up to 14 Years for Sabotage</b><br>Security analysts say Washington should update its 1888 undersea cable law after London proposed letting ministers direct cable operators

Bank Info Security
LOWVulnerability

Why HR Belongs at the Center of AI Change

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/hr-belongs-at-center-ai-change-image_small-7-a-33196.jpg" align=right hspace=4><b>Netskope Exec Mike Anderson on Trust, Training and Change Management</b><br>AI adoption can unsettle employees who fear being replaced, even as leaders expect them to use new tools. Netskope CDIO Mike Anderson explains why CIOs should work with HR on

Bank Info Security