Juniper Networks
Vulnerability activity for Juniper Networks: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 18
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 18
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 35
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- –UnscoredOct 28, 2026Juniper NetworksADV-cccs-ea32751e1f96Serial number: AV26-1101 Date: October 28, 2026 As of October 28, 2026, Juniper Networks is affected by vulnerabilities in the following products: Session Smart Conductor Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3 Session Smart Router Prior to 7.0.5 Prior to 7.1.7 Prior to 7.2.3 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. 2026-10 On-Demand Security Bulletin: Session Smart Router and Session Smar
- 9.8CriticalOct 28, 2026Juniper Networks Session Smart Router Auth bypass / access controlCVE-2026-103409A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure endpoint running as root. Note that this vulnerability can only
- 8.8HighOct 28, 2026Juniper Networks Session Smart Router Memory corruptionCVE-2026-103408A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply.
- 9.8CriticalOct 28, 2026Juniper Networks Session Smart Conductor Code / command injectionCVE-2026-103406An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID.
- 8.8HighOct 28, 2026Juniper Networks Session Smart Router Path traversal / file handlingCVE-2026-103401An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints. Th
- –UnscoredOct 15, 2026Juniper NetworksADV-cccs-c5d4b887e0ccSerial number: AV26-1043 Date: October 15, 2026 As of October 14, 2026, Juniper Networks is affected by vulnerabilities in the following products: Junos OS Versions prior to 23.2R2-S7.7 Version 23.4 prior to 23.4R2-S8.13 Version 24.2 prior to 24.2R2-S5.5 Version 24.4 prior to 24.4R2-S5 Version 25.2 prior to 25.2R2-S2 Version 25.4 prior to 25.4R1-S3 Version 26.2 prior to 26.2R1-S2 Junos OS Evolved Versions prior to 23.2R2-S7.7-EVO Version 23.4 prior to 23.4R2-S8.11-EVO Version 24.2 prior to 24.2R
- 6.5MediumOct 14, 2026Juniper Networks Junos OSCVE-2026-101974An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets.
- 7.5HighOct 14, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-102077An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On MX Series with SPC3 line-card and source NAT con
- 5.9MediumOct 14, 2026Juniper Networks Junos OS Memory corruptionCVE-2026-102078A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When web filtering for TCP traffic is configured, a high volume of DNS requests increases the likel
- 7.8HighOct 14, 2026Juniper Networks Junos OS Code / command injectionCVE-2026-102079An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended com
- 5.3MediumOct 14, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-102080An Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service (DoS). If a SyncE or PTP upstream node sends a malformed message to an MX device e
- 7.5HighOct 14, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-102081A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). On SRX4000 Series, and SRX5000 Series with SPC3, and M
- 5.9MediumOct 14, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-102082An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS). This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS
- 5.9MediumOct 14, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-102083An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When UTM WebFiltering is configured and the WebFiltering cloud server is unreachable, sustained HTTP tr
- 8.1HighOct 14, 2026Juniper Networks Junos OSCVE-2026-102084An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN (ADVPN) receives a message fr
- 6.5MediumOct 14, 2026Juniper Networks Junos OS Evolved Information disclosureCVE-2026-102085An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which
- 5.9MediumOct 14, 2026Juniper Networks Junos OS Memory corruptionCVE-2026-102086A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). When multiple DNS queries are received in a single flow session, where one query matches a Security
- 6.5MediumOct 14, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-102087An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When in a BGP traffic engineering scenario a specific, valid, optional, non-t
- 5.8MediumJul 9, 2026Juniper Networks Junos OSCVE-2026-57054A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable. If an MX Series device is confi
- 6.5MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57032An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service (DoS). If an attempt is made to subscribe to an unsupported telemetry
- 4.7MediumJul 9, 2026Juniper Networks Junos OSCVE-2026-57031An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters. On MX Series devices with MPC10/11, LC4800/9600, and MX304 with subscribers config
- 5.9MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57030A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). As part of the stateful
- 5.3MediumJul 9, 2026Juniper Networks Junos OS Evolved Denial of serviceCVE-2026-57029A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS). When the reachability of an sFlow collector changes, the corresponding next-hop entry is updated
- 7.3HighJul 9, 2026Juniper Networks Junos OS EvolvedCVE-2026-57028An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should only be able to communicate internally
- 6.5MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57027A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series devices allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS).When sFlow is configured in a Virtual Chassis (VC) scenar
- 7.5HighJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57026An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).If the SIP ALG is enabled on an affected device, the proces
- 5.5MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57025A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS). On EX Series, QFX Series and MX Series a low-privileged attacker issuing a specific 's
- 5.3MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57024A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On an MX with SPC3 and SRX devices configured for VPN serv
- 7.5HighJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57023An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service (DoS). When TCP proxy is engaged in a flow session,
- 5.9MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57022An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When an affected device initiates a TCP conne
- 5.3MediumJul 9, 2026Juniper Networks Junos OS Memory corruptionCVE-2026-57021An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an SRX Series device is configured for remote-access VPN with pre-logon compliance check, a netwo
- 6.5MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57020An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). On all QFX10000 platforms in an EVPN-VxLAN scenario, if an att
- 6.5MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-57019An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When a specific packet is received from device in the same broadcast
- 6.5MediumJul 9, 2026Juniper Networks Junos OS Evolved Information disclosureCVE-2026-33803An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whic
- 6.5MediumJul 9, 2026Juniper Networks Junos OS Denial of serviceCVE-2026-33800An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).Micro-BFD session flaps generate respective up/down events which are queued by PFEMAN fo
- 5.1MediumJul 11, 2025Juniper Networks Junos OSCVE-2025-52989An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration. A user with limited configuration and commit permissions, using a specifically crafted
- 7.3HighOct 12, 2023Juniper Networks Junos OSCVE-2023-44182 An Unchecked Return Value vulnerability in the user interfaces to the Juniper Networks Junos OS and Junos OS Evolved, the CLI, the XML API, the XML Management Protocol, the NETCONF Management Protocol, the gNMI interfaces, and the J-Web User Interfaces causes unintended effects such as demotion or
Top products
- Junos OS25 CVEs in the last year
- Junos OS Evolved4 CVEs in the last year
- Session Smart Router3 CVEs in the last year, 1 critical
- Session Smart Conductor1 CVE in the last year, 1 critical
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 28, 2026Juniper Networks security advisory (AV26-1101)ADV-cccs-ea32751e1f96
- Juniper SIRT · Oct 16, 20262025-07 Security Bulletin: Junos OS and Junos OS Evolved: Annotate configuration command can be used for privilege escalation (CVE-2025-52989)CVE-2025-52989
- CCCS (Canada) · Oct 15, 2026Juniper Networks security advisory (AV26-1043)ADV-cccs-c5d4b887e0cc
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution (CVE-2026-102084)CVE-2026-102084
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes (CVE-2026-102087)CVE-2026-102087
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash (CVE-2026-102083)CVE-2026-102083
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVE-2026-102085)CVE-2026-102085
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: MX Series with SPC3: In a NAT scenario malformed packets will lead to resource leaks and eventually traffic stops (CVE-2026-102077)CVE-2026-102077
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover (CVE-2026-102080)CVE-2026-102080
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs (CVE-2026-102082)CVE-2026-102082
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: MX Series: Missing Authorization for specific request CLI commands allows command injection (CVE-2026-102079)CVE-2026-102079
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: SRX 4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic (CVE-2026-102081)CVE-2026-102081
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash (CVE-2026-102086)CVE-2026-102086
- Juniper SIRT · Oct 14, 20262026-10 Security Bulletin: Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash (CVE-2026-102078)CVE-2026-102078
- Juniper SIRT · Jul 20, 20262026-07 Security Bulletin: Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash (CVE-2026-33800)CVE-2026-33800
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.