HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-33788 — A Missing Authentication for Critical Function vulnerability in the Flexible PIC...

·Source: NIST NVD

Updated:

Executive Summary

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead

Analysis

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device. A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead to a full compromise of the affected component. This issue affects Junos OS Evolved on PTX10004, PTX10008, PTX100016, with JNP10K-LC1201 or JNP10K-LC1202: * All versions before 21.2R3-S8-EVO, * 21.4-EVO versions before 21.4R3-S7-EVO, * 22.2-EVO versions before 22.2R3-S4-EVO, * 22.3-EVO versions before 22.3R3-S3-EVO, * 22.4-EVO versions before 22.4R3-S2-EVO, * 23.2-EVO versions before 23.2R2-EVO. CVSS Score: 7.8. Published: 2026-04-09T22:16:28.593.

Indicators of Compromise (1)

CVE (1)
CVE-2026-33788
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Apr 9, 2026. Verified by: NIST.

Related Threats

LOWVulnerability

Weekly Metasploit Update: New Kerberos/Certificate tracing options, and multiple new modules

New Tracing Options As hard as we try to ensure that Metasploit is bug free, issues inevitably come up. Whether you’re running a module on an op or writing a new one, what we can do is make the debugging experience easier. To that end one of our two Google Summer of Code (GSoC) projects is here to deliver. Building on the previous pattern of HttpTrace comes two new options KerberosTicketTrace and

Rapid7
MEDIUMVulnerability

Ozempic Drug Maker Loses Clinical Trial Data in Hack

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/ozempic-drug-maker-loses-clinical-trial-data-in-hack-image_small-6-a-31962.jpg" align=right hspace=4><b>Novo Nordisk Breach Involved 'Copying' of Patient, Healthcare Provider Info</b><br>A hack on Danish pharmaceutical manufacturer Novo Nordisk has compromised some patients' clinical trial information, the maker of popular weight

Bank Info Security
MEDIUMVulnerability

ISACA Survey: AI Adoption Is Rising, Visibility Is Not

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/isaca-survey-ai-adoption-rising-visibility-not-image_small-7-a-31960.jpg" align=right hspace=4><b>Governance Professionals Struggle to Measure ROI and Control AI Systems</b><br>AI is becoming embedded across the enterprise, yet many organizations still can't quantify its value or answer key questions about oversight and control. I

Bank Info Security