Juniper Networks Default Password Vulnerability Let Attacker Take Full Control of the Device

Cybersecuritynews •Abinaya • April 10, 2026

A critical security alert warns of a severe default password vulnerability affecting Support Insights Virtual Lightweight Collector (vLWC) appliances. This flaw enables unauthenticated network-based attackers to gain full administrative control of exposed network devices easily. Formally tracked as CVE-2026-33784, this vulnerability has a near-maximum Common Vulnerability Scoring System (CVSS v3.1) score of 9.8 out of […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Juniper Networks Default Credential Vulnerability Exposes Devices to Full Control Attacks Juniper Networks has issued a critical security alert for a severe vulnerability in its Support Insights Virtual Lightweight Collector (vLWC), tracked as CVE-2026-33784. This flaw, which has a CVSS v3.1 score of 9.8, allows unauthenticated attackers to gain complete control over affected network devices. The vulnerability arises from the failure to require administrators to change a default password during the initial setup, leaving devices exposed to remote attackers on the same network. Once accessed, attackers can alter configurations, intercept data, and potentially launch further attacks within the corporate network. Organizations are urged to upgrade to software release 3.0.94 or later to resolve the issue. For immediate mitigation, administrators can manually change the default password. The vulnerability affects all deployments of the vLWC that have not been secured with a custom password. Cybersecurity teams should prioritize addressing this vulnerability due to its ease of exploitation and the lack of required technical skills for attackers. 3 sources 73

Extracted Entities

Juniper Networks Default Password Vulnerability Let Attacker Take Full Control of the Device

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)