Skip to contentJuniper Junos vulnerabilities
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesCVE-2026-219188.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Specifically malformed SSL packet causes FPC crashCVE-2026-219178.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: A specifically malformed GTP message will cause an FPC crashCVE-2026-219148.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restartCVE-2026-219138.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card resetCVE-2026-219126.8 Medium
- juniper junos os evolvedJunos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stopCVE-2026-219117.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic dropCVE-2026-219107.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crashCVE-2026-219097.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd processCVE-2026-219087.5 High
- juniper junos spaceJunos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)CVE-2026-219078.2 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crashCVE-2026-219068.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crashCVE-2026-219058.7 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Subscribing to telemetry sensors at scale causes all FPCs to crashCVE-2026-219037.1 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Receipt of a specifically malformed ICMP packet causes an FPC restartCVE-2026-02037.1 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flapCVE-2025-600116.9 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: A specifically crafted 'show chassis' command causes chassisd to crashCVE-2025-600076.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crashCVE-2025-600038.7 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writableCVE-2025-599616.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP serverCVE-2025-599606.3 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crashCVE-2025-599596.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Device allows login for user with expired passwordCVE-2025-600105.3 Medium
- juniper junos spaceJunos Space: CLI Configlet page is vulnerable to reflected cross-site script injectionCVE-2025-600095.1 Medium
- juniper junos os evolvedJunos OS Evolved: OS command injection vulnerabilities fixedCVE-2025-600064.8 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crashCVE-2025-600048.7 High
- juniper junos spaceJunos Space: Template Definitions page is vulnerable to reflected cross-site script injectionCVE-2025-600025.1 Medium
- juniper junos spaceJunos Space: Create Quick Template page is vulnerable to reflected cross-site script injectionCVE-2025-600015.1 Medium
- juniper junos spaceJunos Space: Generate Report page is vulnerable to reflected cross-site script injectionCVE-2025-600005.1 Medium
- juniper junos spaceJunos Space: API Access Profiles page is vulnerable to reflected cross-site script injectionCVE-2025-599995.1 Medium
- juniper junos spaceJunos Space: Archive Logs screen is vulnerable to reflected cross-site script injectionCVE-2025-599985.1 Medium
- juniper junos spaceJunos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injectionCVE-2025-599975.1 Medium
- juniper junos spaceJunos Space: Configuration View page is vulnerable to reflected cross-site script injectionCVE-2025-599965.1 Medium
- juniper junos spaceJunos Space: Template creation through Definition is vulnerable to reflected cross-site script injectionCVE-2025-599955.1 Medium
- juniper junos spaceJunos Space: Quick Template page is vulnerable to reflected cross-site script injectionCVE-2025-599945.1 Medium
- juniper junos spaceJunos Space: Space Node Setting fields are vulnerable to reflected cross-site script injectionCVE-2025-599935.1 Medium
- juniper junos spaceJunos Space: Secure Console page is vulnerable to reflected cross-site script injectionCVE-2025-599925.1 Medium
- juniper junos spaceJunos Space: Device Management pages are vulnerable to reflected cross-site script injectionCVE-2025-599915.1 Medium
- juniper junos spaceJunos Space: Template creation pages are vulnerable to reflected cross-site script injectionCVE-2025-599905.1 Medium
- juniper junos spaceJunos Space: Device Discovery page is vulnerable to reflected cross-site script injectionCVE-2025-599895.1 Medium
- juniper junos spaceJunos Space: Generate Report page is vulnerable to reflected cross-site script injectionCVE-2025-599885.1 Medium
- juniper junos spaceJunos Space: The arbitrary device search field is vulnerable to reflected cross-site script injectionCVE-2025-599875.1 Medium
- juniper junos spaceJunos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injectionCVE-2025-599865.1 Medium
- juniper junos spaceJunos Space: Purging Policy field is vulnerable to reflected cross-site script injectionCVE-2025-599855.1 Medium
- juniper junos spaceJunos Space: Global Search is vulnerable to reflected cross-site script injectionCVE-2025-599845.1 Medium
- juniper junos spaceJunos Space: Template Definition page is vulnerable to reflected cross-site script injectionCVE-2025-599835.1 Medium
- juniper junos spaceJunos Space: Dashboard Search field is vulnerable to reflected cross-site script injectionCVE-2025-599825.1 Medium
- juniper junos spaceJunos Space: Device Template Definition page is vulnerable to reflected cross-site script injectionCVE-2025-599815.1 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowedCVE-2025-599806.9 Medium
- juniper junos spaceJunos Space: Stored cross-site scripting vulnerability in web applicationCVE-2025-599789.4 Critical
- juniper junos spaceJunos Space: Arbitrary file download vulnerability in web interfaceCVE-2025-599767.1 High
- juniper junos spaceJunos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoSCVE-2025-599758.7 High
- Show moreLoading…