Disclosure summary
An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET method to access any file on the file system. Using specially crafted GET methods, an attacker can gain access to files beyond the file path normally allowed by the JBoss daemon. These files could contain sensitive information restricted from access by low-privileged users.This issue affects all versions of Junos Space before 24.1R3.
Source-reported weakness categories
CWE-552
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
NIST National Vulnerability Database · NVD-CVE-2025-59976
Open original source · Updated Oct 08, 2026
Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| juniper | junos_space | * {"versionEndExcluding":"24.1"} |
| juniper | junos_space | 24.1 |
| juniper | junos_space | 24.1 |
Original records & references
- NIST NVD record
- CVE Program record
- supportportal.juniper.net — Vendor Advisory
PUBLISHED 2025-10-09T12:15:47-04:00
MODIFIED 2026-10-08T09:10:00-04:00
INGESTED 2026-10-08T12:30:36-04:00