Juniper Networks vulnerabilities

Products

• Junos Os 824
• Junos Os Evolved 376
• Junos Space 49
• Northstar Controller Application 19
• Session Smart Router 18
• Atp 12
• Session Smart Conductor 12
• Screenos 7
• Contrail Service Orchestration 5
• Paragon Active Assurance 5
• Junos Space Security Director 3
• Mist Cloud Ui 3
• Src Series 3
• Contrail 2
• Jsi Lwc 2
• Sbr Carrier 2

Newest

• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration CVE-2026-106079 8.8 HighOctober 28, 2026
• juniper networks session smart router Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing CVE-2026-103411 7.1 HighOctober 28, 2026
• juniper networks session smart router Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection CVE-2026-103410 7.5 HighOctober 28, 2026
• juniper networks session smart router Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed CVE-2026-103409 9.8 CriticalOctober 28, 2026
• juniper networks session smart router Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options CVE-2026-103408 8.8 HighOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management CVE-2026-103407 8.8 HighOctober 28, 2026
• juniper networks session smart conductor Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. CVE-2026-103406 9.8 CriticalOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting CVE-2026-103405 5.8 MediumOctober 28, 2026
• juniper networks session smart conductor Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials CVE-2026-103404 6.8 MediumOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules CVE-2026-103403 8.8 HighOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation CVE-2026-103402 8.8 HighOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root CVE-2026-103401 8.8 HighOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup CVE-2026-103400 5.5 MediumOctober 28, 2026
• juniper networks session smart router Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates. CVE-2026-103394 3.7 LowOctober 28, 2026
• juniper networks session smart router Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing CVE-2026-103393 4.3 MediumOctober 28, 2026
• juniper networks session smart router Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled CVE-2026-103392 4.8 MediumOctober 28, 2026
• juniper networks session smart router Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature CVE-2026-103391 5.3 MediumOctober 28, 2026
• juniper networks session smart conductor, session smart router +1 more Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification CVE-2026-103390 5.3 MediumOctober 28, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled CVE-2026-101954 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled CVE-2026-101952 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash CVE-2026-101949 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message CVE-2026-101964 7.1 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used CVE-2026-101963 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used CVE-2026-101962 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy CVE-2026-101961 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash CVE-2026-101959 7.1 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured CVE-2026-101983 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used CVE-2026-101982 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled CVE-2026-101981 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled CVE-2026-101979 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash CVE-2026-101976 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used CVE-2026-101975 7.1 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled CVE-2026-101972 7.1 HighOctober 14, 2026
• juniper networks junos os Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops CVE-2026-102077 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled CVE-2026-33798 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled CVE-2026-33796 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised CVE-2026-33795 8.7 HighOctober 14, 2026
• juniper networks junos os Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured CVE-2026-33792 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service CVE-2026-33789 9.2 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used CVE-2026-102185 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash CVE-2026-102184 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes CVE-2026-102183 8.7 HighOctober 14, 2026
• juniper networks junos os Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution CVE-2026-102182 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use CVE-2026-102180 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used CVE-2026-102179 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise CVE-2026-102178 9.3 CriticalOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used CVE-2026-102177 7.2 HighOctober 14, 2026
• juniper networks junos os Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled CVE-2026-102176 8.7 HighOctober 14, 2026
• juniper networks junos os, junos os evolved +1 more Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used CVE-2026-102175 9.3 CriticalOctober 14, 2026
• juniper networks junos os Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled CVE-2026-102174 8.7 HighOctober 14, 2026
• Show olderLoading…