GHSA-f2v8-3pfh-v3xm

Exploit Intelligence

• A Proof of Concept for chaining the CVEs [CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847] to achieve Remote Code Execution (phpinfo) in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr . (github-poc)
• A Proof of Concept for chaining the CVEs [CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847] to achieve Remote Code Execution (phpinfo) in Juniper JunOS within SRX and EX Series products.Modified from original exploit developed by @watchTowr . (github-poc)
• Perform With Massive Juniper Remote Code Execution (github-poc)
• Perform With Massive Juniper Remote Code Execution (github-poc)
• watchtowrlabs/juniper-rce_cve-2023-36844 (github-poc)
• watchtowrlabs/juniper-rce_cve-2023-36844 (github-poc)
• cve_version_check.go (github-poc)
• kev.json (github-poc)
• kev.json (github-poc)
• cve_version_check.go (github-poc)

…and 8 more exploits

Timeline

• CVE Published
• Apr 10, 2026 Security Advisory