Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-106079Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG…
- CVE-2026-103411Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing
- CVE-2026-103410Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection
- CVE-2026-103409Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed
- CVE-2026-103408Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options
- CVE-2026-103407Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI…
- CVE-2026-103406Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.
- CVE-2026-103405Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting
- CVE-2026-103404Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials
- CVE-2026-103403Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting…
- CVE-2026-103402Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and…
- CVE-2026-103401Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root
- CVE-2026-103400Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
- CVE-2026-103394Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
- CVE-2026-103393Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing
- CVE-2026-103392Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
- CVE-2026-103391Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature
- CVE-2026-103390Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification
- CVE-2026-101954Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
- CVE-2026-101952Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
- CVE-2026-101949Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash
- CVE-2026-101964Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
- CVE-2026-101963Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used
- CVE-2026-101962Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used
- CVE-2026-101961Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy
- CVE-2026-101959Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
- CVE-2026-101983Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
- CVE-2026-101982Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
- CVE-2026-101981Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled
- CVE-2026-101979Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled