Skip to contentJuniper Networks vulnerabilities
Newest
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashesCVE-2026-337788.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive informationCVE-2026-337766.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effectCVE-2026-337746.9 Medium
- juniper networks ctp os, juniper ctp operating system +1 moreCTP OS: Configuring password requirements does not work which permits the use of weak passwordsCVE-2026-337719.1 Critical
- juniper apstraApstra: SSH host key validation vulnerability for managed devicesCVE-2025-139147.0 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP resetCVE-2026-337977.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Insufficient certificate verification for device to SD cloud communicationCVE-2026-337798.3 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgdCVE-2026-337757.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logoutsCVE-2026-337828.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2aldCVE-2026-337807.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not appliedCVE-2026-337736.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashesCVE-2026-337866.8 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A low privileged user can escalate their privileges so that they can login as rootCVE-2026-219167.0 High
- juniper junos os evolvedJunos OS Evolved: Local, authenticated attacker can gain privileged access to FPCsCVE-2026-337888.5 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailabilityCVE-2026-219197.1 High
- juniper virtual lightweight collector, juniper networks jsi lwc +1 moreJSI Virtual Lightweight Collector: Shell escape allows privilege escalation to rootCVE-2026-219158.4 High
- juniper junos spaceJunos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injectionCVE-2026-219045.1 Medium
- juniper junos os evolvedJunos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restartCVE-2025-599697.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the systemCVE-2026-337938.5 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Privileged local user can gain access to a Linux-based FPC as rootCVE-2025-306508.4 High
- juniper junos os evolvedJunos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as rootCVE-2026-21902Public exploitEPSS 18.5%9.3 Critical
- juniper networks session smart conductor, session smart router, wan assurance managed router +2 moreSession Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerabilityCVE-2025-215899.3 Critical
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crashCVE-2026-219217.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crashCVE-2026-219208.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesCVE-2026-219188.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Specifically malformed SSL packet causes FPC crashCVE-2026-219178.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A specifically malformed GTP message will cause an FPC crashCVE-2026-219148.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restartCVE-2026-219138.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card resetCVE-2026-219126.8 Medium
- juniper junos os evolvedJunos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stopCVE-2026-219117.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic dropCVE-2026-219107.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crashCVE-2026-219097.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd processCVE-2026-219087.5 High
- juniper junos spaceJunos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)CVE-2026-219078.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crashCVE-2026-219068.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crashCVE-2026-219058.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Subscribing to telemetry sensors at scale causes all FPCs to crashCVE-2026-219037.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specifically malformed ICMP packet causes an FPC restartCVE-2026-02037.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flapCVE-2025-600116.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A specifically crafted 'show chassis' command causes chassisd to crashCVE-2025-600076.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crashCVE-2025-600038.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writableCVE-2025-599616.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP serverCVE-2025-599606.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crashCVE-2025-599596.8 Medium
- juniper paragon automation, juniper networks paragon automation (pathfinder, planner, insights) +1 moreParagon Automation: A clickjacking vulnerability in the web server configuration has been addressedCVE-2025-529875.1 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Device allows login for user with expired passwordCVE-2025-600105.3 Medium
- juniper junos spaceJunos Space: CLI Configlet page is vulnerable to reflected cross-site script injectionCVE-2025-600095.1 Medium
- juniper junos os evolvedJunos OS Evolved: OS command injection vulnerabilities fixedCVE-2025-600064.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crashCVE-2025-600048.7 High
- juniper junos spaceJunos Space: Template Definitions page is vulnerable to reflected cross-site script injectionCVE-2025-600025.1 Medium
- Show moreLoading…