CVE-2026-21915 JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

CVE-2026-33784: Use of Default Password

A Use of Default Password vulnerability in the Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows an unauthenticated, network-based attacker to take full control of the device. vLWC software images ship with an initial password for a high privileged account. A change ...

CVE-2026-21915: Permissive List of Allowed Inputs

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

hermes:fuzzer-jsi-entry: Container-overflow in std::__1::enable_if<

Detailed Report: https://oss-fuzz.com/testcase?key=5192915280789504 Project: hermes Fuzzing Engine: centipede Fuzz Target: fuzzer-jsi-entry Job Type: centipedeasanhermes Platform Id: linux Crash Type: Container-overflow WRITE 8 Crash Address: 0x60b00000080f Crash State:...

CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

PT-2023-11643 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.0.11 Description: An issue in Jsish allows a remote attacker to cause a denial of service via the Jsi ValueIsNumber function in the ./src/jsiValue.c file. Recommendations: For Jsish version 3.0.11, as a temporary workaround,...

PT-2023-11644

Name of the Vulnerable Software and Affected Versions Jsish versions 3.0.11 and earlier Description An issue in Jsish allows an attacker to cause a denial of service via the Jsi Strlen function in the src/jsiChar.c file. Recommendations For versions 3.0.11 and earlier, as a temporary workaround,...

CVE-2021-46500

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46499

Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46492

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46489

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46489

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46488

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46496

Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12734

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A SEGV issue was found in Jsish via the jsi ArrayConcatCmd function at src/jsiArray.c, which can cause a Denial of Service DoS. Recommendations For version 3.5.0, consider disabling the jsi ArrayConcatCmd functi...

PT-2022-12735

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap-use-after-free issue was discovered in Jsish, which can lead to a Denial of Service DoS. The issue is related to the Jsi DecrRefCount function in the src/jsiValue.c file. Recommendations For Jsish version...

PT-2022-12743

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a heap-use-after-free in the jsi wswebsocketObjFree function located in src/jsiWebSocket.c. This can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider...

PT-2022-12738

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability via Jsi FunctionInvoke at src/jsiFunc.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the Jsi FunctionInvoke...

PT-2022-12730

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a heap-use-after-free vulnerability via Jsi IncrRefCount in src/jsiValue.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, at the moment, there is no...

PT-2022-12742

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a heap-use-after-free in jsi UserObjDelete in the file src/jsiUserObj.c. This can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the jsi...