Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

**Juniper J-Web RCE (CVE-2024-21591) — Critical (CVSS 9.8):** Juniper released patches for a critical out-of-bounds write in J-Web affecting SRX and EX Series devices that can enable unauthenticated RCE and root access; fixed versions and temporary mitigations (disable J‑Web or restrict access) are provided, and over 11,500 J‑Web interfaces were observed exposed on the internet as of January 2024.