This vulnerability (CVE-2026-33786) in Juniper Networks Junos OS arises from an improper check for unusual or exceptional conditions (CWE-754) within the chassis control daemon (chassisd) on SRX1600, SRX2300, and SRX4300 devices. When a specific 'show chassis' CLI command is executed by a local user with low privileges, it causes the chassisd process to crash and restart. This leads to a temporary denial of service impacting all traffic until the system modules fully recover. The issue affects Junos OS 24.4 versions prior to 24.4R1-S3 and 24.4R2, but not versions before 24.4R1. The CVSS 3.1 base score is 5.5, reflecting a medium severity with local attack vector, low complexity, low privileges required, no user interaction, and impact limited to availability. Juniper manages remediation for this cloud-hosted service, and a patch is available.

A local attacker with low privileges can cause a temporary denial of service by crashing the chassis control daemon (chassisd) via a specific CLI command. This results in momentary traffic disruption until all modules restart and come back online. There is no impact on confidentiality or integrity, only availability is affected. No known exploits are reported in the wild.

A patch is available for this vulnerability. Since Junos OS is offered as a cloud service, Juniper Networks manages remediation server-side. Users should verify with Juniper's official advisory for patch deployment status and apply updates accordingly to affected versions 24.4 before 24.4R1-S3 and 24.4R2. No additional mitigation actions are specified.