Juniper vulnerabilities

Products

• Junos 794
• Junos Os Evolved 250
• Junos Space 79
• Northstar Controller 19
• Junos Os 16
• Screenos 16
• Advanced Threat Prevention 11
• Srx100 11
• Srx110 11
• Srx1400 11
• Srx210 11
• Srx220 11
• Srx240 11
• Srx3400 11
• Srx3600 11
• Srx550 11
• Srx650 11
• Srx5600 10
• Srx5800 10
• Junos Evolved 9
• Netscreen Screenos 9
• Contrail Service Orchestration 7
• Junos Os 7
• Ive Os 6
• Junos Pulse Secure Access Service 5
• Junos Space Ja1500 Appliance 5
• Libslax 5
• Paragon Active Assurance Control Center 5
• Junos Space Virtual Appliance 4
• Session And Resource Control 4
• Ctpview 3
• Junose 3
• Junos Pulse Access Control Service 3
• Mist Cloud Ui 3
• Netscreen-5200 3
• Netscreen-5400 3
• Pulse Connect Secure 3
• Secure Access 2000 3
• Appformix 2
• Contrail 2

Show 17 moreShow less

• Fips Secure Access 4000 2
• Fips Secure Access 4500 2
• Fips Secure Access 6000 2
• Fips Secure Access 6500 2
• Identity Management Service 2
• Junos E 2
• Mag2600 Gateway 2
• Mag4610 Gateway 2
• Mag6610 Gateway 2
• Mag6611 Gateway 2
• Secure Access 2
• Secure Access 2500 2
• Secure Access 4500 2
• Secure Access 700 2
• Smartpass 2
• Space Security Director 2
• Virtual Lightweight Collector 2

Newest

• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised CVE-2026-101990 9.3 CriticalOctober 14, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution CVE-2026-101986 9.3 CriticalOctober 14, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs CVE-2026-57054 6.9 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash CVE-2026-57032 7.1 HighJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect CVE-2026-57031 5.3 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS CVE-2026-57030 8.2 HighJuly 9, 2026
• juniper junos os evolved Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash CVE-2026-57029 6.0 MediumJuly 9, 2026
• juniper junos os evolved Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker CVE-2026-57028 6.9 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash CVE-2026-57027 7.1 HighJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash CVE-2026-57026 8.7 HighJuly 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash CVE-2026-57025 6.8 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously CVE-2026-57024 6.9 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash CVE-2026-57023 8.7 HighJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE CVE-2026-57022 8.2 HighJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash CVE-2026-57021 6.9 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood CVE-2026-57020 7.1 HighJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: Specific traffic causes an FPC to reset CVE-2026-57019 7.1 HighJuly 9, 2026
• juniper junos os evolved Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker CVE-2026-33803 6.9 MediumJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command CVE-2026-33802 6.8 MediumJuly 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes CVE-2026-33801 7.1 HighJuly 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash CVE-2026-33800 7.1 HighJuly 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash CVE-2026-33799 5.3 MediumJuly 9, 2026
• juniper junos os evolved Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash CVE-2026-33794 8.2 HighJuly 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash CVE-2026-21901 6.7 MediumJuly 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root CVE-2026-33791 8.4 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart. CVE-2026-33790 8.7 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes CVE-2026-33787 6.8 MediumApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario CVE-2026-33785 6.3 MediumApril 9, 2026
• juniper virtual lightweight collector, juniper networks jsi lwc +1 more JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access CVE-2026-33784 9.3 CriticalApril 9, 2026
• juniper junos os evolved Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes CVE-2026-33783 7.1 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed CVE-2026-33781 7.1 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes CVE-2026-33778 8.7 HighApril 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information CVE-2026-33776 6.8 MediumApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect CVE-2026-33774 6.9 MediumApril 9, 2026
• juniper networks ctp os, juniper ctp operating system +1 more CTP OS: Configuring password requirements does not work which permits the use of weak passwords CVE-2026-33771 9.1 CriticalApril 9, 2026
• juniper apstra Apstra: SSH host key validation vulnerability for managed devices CVE-2025-13914 7.0 HighApril 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset CVE-2026-33797 7.1 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication CVE-2026-33779 8.3 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd CVE-2026-33775 7.1 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts CVE-2026-33782 8.7 HighApril 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald CVE-2026-33780 7.1 HighApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied CVE-2026-33773 6.9 MediumApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes CVE-2026-33786 6.8 MediumApril 9, 2026
• juniper junos, juniper networks junos os +1 more Junos OS: A low privileged user can escalate their privileges so that they can login as root CVE-2026-21916 7.0 HighApril 9, 2026
• juniper junos os evolved Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs CVE-2026-33788 8.5 HighApril 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability CVE-2026-21919 7.1 HighApril 9, 2026
• juniper virtual lightweight collector, juniper networks jsi lwc +1 more JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root CVE-2026-21915 8.4 HighApril 9, 2026
• juniper junos space Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection CVE-2026-21904 5.1 MediumApril 9, 2026
• juniper junos os evolved Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart CVE-2025-59969 7.1 HighApril 9, 2026
• juniper junos, junos os evolved, juniper networks junos os +2 more Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system CVE-2026-33793 8.5 HighApril 9, 2026
• Show olderLoading…