PT-2026-31744 · Juniper Networks · Juniper Networks Support Insights (Jsi) Virtual Lightweight Collector

CVE-2026-21915 · Published 2026-04-09 · Updated 2026-07-08

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) versions prior to 3.0.94

Description A permissive list of allowed input issue exists in the CLI of JSI vLWC. A local, high privileged attacker can escalate privileges to root by exploiting insufficient input validation, leading to shell command injection. Successful exploitation allows execution of shell commands with root permissions, potentially granting complete system control.

Recommendations Update to version 3.0.94 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

CWE-183

Related Identifiers

CVE-2026-21915

Affected Products

Juniper Networks Support Insights (Jsi) Virtual Lightweight Collector

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-21915 · Security Note
• https://kb.juniper.net/JSA106016 · Vendor Advisory
• https://twitter.com/CVEnew/status/2042561828518269095 · Twitter Post
• https://t.me/cveNotify/190777 · Telegram Post