Juniper Networks Default Password Vulnerability Let Attacker Take Full Control of the Device

A critical vulnerability (CVE-2026-33784, CVSS v3.1 9.8) in Juniper Support Insights vLWC appliances stems from a shipped, publicly known default administrator password and failure to enforce an initial password reset, allowing unauthenticated remote actors to obtain full administrative control. Juniper SIRT discovered the issue internally; administrators are urged to upgrade to vLWC 3.0.94 or later and immediately change default credentials if patching is delayed.