CVE-2025-21590
JU
Juniper Junos OS
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
What it is
Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-loca
- nvd.nist.gov/vuln/detail/CVE-2025-21590
Description and required action as published by CISA. Full record at NVD.
Other Juniper entries on the list
- ScreenOS Juniper ScreenOS Improper Authentication Vulnerability CVE-2015-7755 · Oct 2, 2025
- Junos OS Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability CVE-2023-36851 · Nov 13, 2023
- Junos OS Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability CVE-2023-36847 · Nov 13, 2023
- Junos OS Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability CVE-2023-36846 · Nov 13, 2023
- Junos OS Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability CVE-2023-36845 · Nov 13, 2023
- Junos OS Juniper Junos OS EX Series PHP External Variable Modification Vulnerability CVE-2023-36844 · Nov 13, 2023