This vulnerability (CVE-2026-33786) in Juniper Networks Junos OS arises from an improper check for unusual or exceptional conditions (CWE-754) in the chassis control daemon (chassisd) on SRX1600, SRX2300, and SRX4300 devices. When a specific 'show chassis' CLI command is executed by a local user with low privileges, it causes the chassisd process to crash and restart. This results in a temporary denial of service impacting all traffic until the system modules are fully operational again. The issue affects Junos OS version 24.4 prior to 24.4R1-S3 and 24.4R2, but not versions before 24.4R1. The CVSS v3.1 base score is 5.5, reflecting medium severity with local attack vector, low complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. The vendor provides a patch, and as this is a cloud service, remediation is managed by Juniper Networks.

A local attacker with low privileges can cause a denial of service by crashing the chassis control daemon (chassisd) on affected Junos OS devices, resulting in a temporary disruption of all traffic until the system recovers. There is no impact on confidentiality or integrity, only availability is affected. The disruption is momentary but affects all modules until they are back online.

A patch is available for this vulnerability in Junos OS versions 24.4R1-S3 and 24.4R2. Since this is a cloud-hosted service, Juniper Networks manages remediation on their side. Users should ensure their devices are updated to the fixed versions to prevent exploitation. Check the vendor advisory for the latest patch and remediation details.