Skip to content
Juniper Junos vulnerabilities
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
CVE-2026-101990
9.3 Critical
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
CVE-2026-101986
9.3 Critical
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs
CVE-2026-57054
6.9 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash
CVE-2026-57032
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect
CVE-2026-57031
5.3 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS
CVE-2026-57030
8.2 High
-
juniper junos os evolved
Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
CVE-2026-57029
6.0 Medium
-
juniper junos os evolved
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
CVE-2026-57028
6.9 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash
CVE-2026-57027
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash
CVE-2026-57026
8.7 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash
CVE-2026-57025
6.8 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
CVE-2026-57024
6.9 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash
CVE-2026-57023
8.7 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE
CVE-2026-57022
8.2 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash
CVE-2026-57021
6.9 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood
CVE-2026-57020
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: Specific traffic causes an FPC to reset
CVE-2026-57019
7.1 High
-
juniper junos os evolved
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
CVE-2026-33803
6.9 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command
CVE-2026-33802
6.8 Medium
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
CVE-2026-33801
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
CVE-2026-33800
7.1 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
CVE-2026-33799
5.3 Medium
-
juniper junos os evolved
Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
CVE-2026-33794
8.2 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash
CVE-2026-21901
6.7 Medium
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
CVE-2026-33791
8.4 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.
CVE-2026-33790
8.7 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes
CVE-2026-33787
6.8 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario
CVE-2026-33785
6.3 Medium
-
juniper junos os evolved
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes
CVE-2026-33783
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed
CVE-2026-33781
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes
CVE-2026-33778
8.7 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information
CVE-2026-33776
6.8 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect
CVE-2026-33774
6.9 Medium
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset
CVE-2026-33797
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication
CVE-2026-33779
8.3 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd
CVE-2026-33775
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts
CVE-2026-33782
8.7 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald
CVE-2026-33780
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied
CVE-2026-33773
6.9 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes
CVE-2026-33786
6.8 Medium
-
juniper junos, juniper networks junos os +1 more
Junos OS: A low privileged user can escalate their privileges so that they can login as root
CVE-2026-21916
7.0 High
-
juniper junos os evolved
Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs
CVE-2026-33788
8.5 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability
CVE-2026-21919
7.1 High
-
juniper junos space
Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection
CVE-2026-21904
5.1 Medium
-
juniper junos os evolved
Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart
CVE-2025-59969
7.1 High
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system
CVE-2026-33793
8.5 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: Privileged local user can gain access to a Linux-based FPC as root
CVE-2025-30650
8.4 High
-
juniper junos os evolved
Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root
CVE-2026-21902
Public exploit
EPSS 18.5%
9.3 Critical
-
juniper junos, junos os evolved, juniper networks junos os +2 more
Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash
CVE-2026-21921
7.1 High
-
juniper junos, juniper networks junos os +1 more
Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash
CVE-2026-21920
8.7 High
- Show olderLoading…