CVE-2026-21907

Published: Jan 15, 2026Modified: Jun 17, 2026

8.2

Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:Green

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:M/U:GreenShow less

Source: sirt@juniper.net (Secondary)

Description

A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers), reducing the confidentiality of on-path traffic communicated across the connection. These ciphers also do not support Perfect Forward Secrecy (PFS), affecting the long-term confidentiality of encrypted communications.This issue affects all versions of Junos Space before 24.1R5.

Affected (5)

Products: Juniper: Junos Space

Juniper

1 product

Junos Space

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos Space	Before 24.1
Juniper Junos Space	Version 24.1 r1
Juniper Junos Space	Version 24.1 r2
Juniper Junos Space	Version 24.1 r3
Juniper Junos Space	Version 24.1 r4

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://kb.juniper.net/JSA106006

Source: sirt@juniper.net

Vendor Advisory

https://supportportal.juniper.net/JSA106006

Source: sirt@juniper.net

Vendor Advisory

Timeline

No history available yet.