CVE Watch—

CVE-2025-21590

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

CVSS

—

No CVSS

EPSS

1.7%

p74

KEV

YES

Mar 13, 2025

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

1.7%EPSS · 30 days1.7%

2026-06-302026-07-16

KEV catalog record

Product

Juniper / Junos OS

Vulnerability

Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

Added to KEV

Mar 13, 2025

Remediate by

Apr 3, 2025

Known ransomware use

Summary description

Juniper Junos OS contains an improper isolation or compartmentalization vulnerability. This vulnerability could allows a local attacker with high privileges to inject arbitrary code.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-21590

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-36846—

99.8%

KEV—80Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—CVE-2023-36845—

99.8%

KEV—80Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability—CVE-2023-36844—

99.8%

KEV—80Juniper Junos OS EX Series PHP External Variable Modification Vulnerability—CVE-2023-36847—

99.7%

KEV—80Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability—CVE-2020-1631—

90.8%

KEV—77Juniper Junos OS Path Traversal Vulnerability—CVE-2023-36851—

61.6%

KEV—68Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability—