CVE-2025-59968HIGH 8.6EPSS p19.3%

CVE-2025-59968CVE-2025-59968

Description

A Missing Authorization vulnerability in the Juniper Networks Junos Space Security Director allows an unauthenticated network-based attacker to read or modify metadata via the web interface.  Tampering with this metadata can result in managed SRX Series devices permitting network traffic that should otherwise be blocked by policy, effectively bypassing intended security controls. This issue affects Junos Space Security Director * all versions prior to 24.1R3 Patch V4 This issue does not affect managed cSRX Series devices.

Scoring

CVSS 3.18.6 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS0.28% probability of exploitation · percentile 19.3% · 2026-06-18T12:00:27Z
Published2025-10-09
Last modified2026-01-23

Underlying weaknesses· 1

CWE-862

References

  1. https://supportportal.juniper.net/JSA103157
  2. https://www.juniper.net/documentation/us/en/software/nm-apps24.1/junos-space-security-director/topics/task/junos-space-metadata-creating.html

1

TypeTargetConfidenceTier
WeaknessMissing Authorizationcwe-8620%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-52950
CVE
CVE-2025-59974
CVE
CVE-2025-59978
CVE
CVE-2026-33785
CVE
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
CVE
CVE-2025-13914
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.