Juniper Virtual Lightweight Collector vulnerabilities

2 CVEs affecting Juniper Virtual Lightweight Collector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-33784, published 2026-04-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-21915, published 2026-04-09. Medium severity, CVSS 6.7. EPSS: 2.2% chance of exploitation in the next 30 days. A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, high privileged attacker to escalate their…
CVE-2026-33784, published 2026-04-09. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control…