Bleepingcomputer

Critical Vulnerability in Juniper PTX Routers Allows Remote Code Execution

First seen 26 Feb 2026, 17:13 UTC • Supportportal.Juniper

+10 •66.2

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

A critical vulnerability identified as CVE-2026-21902 affects the Junos OS Evolved on PTX Series routers, enabling unauthenticated attackers to execute code with root privileges. These routers are widely used by internet service providers and cloud applications, making this flaw particularly significant for network security. The vulnerability was published on February 25, 2026.

ThreatCluster AI How this analysis works

Timeline

2026-02-25

CVE-2026-21902 published

2026-02-26

Bleepingcomputer reports on the vulnerability

2026-02-26

Juniper releases security bulletin regarding the flaw

Attack Flow

17 entities, 30 inferred relationships (STIX 2.1).

Technique (2)

Zero-day Exploit
T1190 - Exploit Public-Facing Application

Campaign (2)

J-magic
Mirai Botnet Campaigns

Organization (1)

Juniper Networks

Vulnerability (2)

CVE-2026-21902
Incorrect Permission Assignment For Critical Resource

Malware (2)

Mirai
Tinyshell

Affected Platform (8)

Juniper Networks PTX
Juniper Smart Routers
Juniper VPN Gateways
Junos OS Evolved
Junos OS MX Routers
PTX Routers
PTX Series
PTX Series Routers

Relationships

Mirai exploits CVE-2026-21902
Mirai exploits Incorrect Permission Assignment For Critical Resource
Tinyshell exploits CVE-2026-21902
Tinyshell exploits Incorrect Permission Assignment For Critical Resource
J-magic uses Mirai
J-magic uses Tinyshell
Mirai Botnet Campaigns uses Mirai
Mirai Botnet Campaigns uses Tinyshell
CVE-2026-21902 targets Juniper Networks PTX
CVE-2026-21902 targets Juniper Smart Routers
CVE-2026-21902 targets Juniper VPN Gateways
CVE-2026-21902 targets Junos OS Evolved
Incorrect Permission Assignment For Critical Resource targets Juniper Networks PTX
Incorrect Permission Assignment For Critical Resource targets Juniper Smart Routers
Incorrect Permission Assignment For Critical Resource targets Juniper VPN Gateways
Incorrect Permission Assignment For Critical Resource targets Junos OS Evolved
Mirai targets Juniper Networks
Tinyshell targets Juniper Networks
Zero-day Exploit targets Juniper Networks PTX
Zero-day Exploit targets Juniper Smart Routers
Zero-day Exploit targets Juniper VPN Gateways
Zero-day Exploit targets Junos OS Evolved
T1190 - Exploit Public-Facing Application targets Juniper Networks PTX
T1190 - Exploit Public-Facing Application targets Juniper Smart Routers
T1190 - Exploit Public-Facing Application targets Juniper VPN Gateways
T1190 - Exploit Public-Facing Application targets Junos OS Evolved
J-magic related to Junos OS MX Routers
J-magic related to PTX Routers
J-magic related to PTX Series
J-magic related to PTX Series Routers

Critical Vulnerability in Juniper PTX Routers Allows Remote Code Execution

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading