#unc3886

Analysis · Jun 16, 2026 · Colten Anderson

Juniper Junos OS has six KEV entries and two separate attack surfaces

Five CVSS 5.3 bugs in J-Web that chain to unauthenticated RCE, and a kernel isolation flaw exploited by a China-nexus actor to root MX routers. The scoring gap on the first cluster is the operational lesson.