Medium severity · published Apr 9, 2026
CVE-2026-21904
Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection
6.1
CVSS
0.2%
EPSS
No
On KEV
Description
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inject script tags in the
list filter field that, when visited by another user, enables the attacker to execute commands with the target's permissions, including an administrator.
This issue affects all versions of Junos Space before 24.1R5 Patch V3.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Junos Space · Juniper Networks
before 24.1R5 Patch V3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-21904
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-21904
Vendor Advisory
https://kb.juniper.net/JSA106003
More from Junos Space
8.8
CVE-2019-0017
Junos Space: Unrestricted file upload vulnerability
6.5
CVE-2019-0016
Junos Space: Authenticated user able to delete devices without delete device privileges
