# cve.now: Juniper Networks

The newest entries naming Juniper Networks as an affected vendor (up to 200), of 1,089 in all, 7 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-106079](https://cve.now/CVE-2026-106079.md): Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG… (CVSS 8.8)
- [CVE-2026-103411](https://cve.now/CVE-2026-103411.md): Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing (CVSS 7.1)
- [CVE-2026-103410](https://cve.now/CVE-2026-103410.md): Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection (CVSS 7.5)
- [CVE-2026-103409](https://cve.now/CVE-2026-103409.md): Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed (CVSS 9.8)
- [CVE-2026-103408](https://cve.now/CVE-2026-103408.md): Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options (CVSS 8.8)
- [CVE-2026-103407](https://cve.now/CVE-2026-103407.md): Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI… (CVSS 8.8)
- [CVE-2026-103406](https://cve.now/CVE-2026-103406.md): Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. (CVSS 9.8)
- [CVE-2026-103405](https://cve.now/CVE-2026-103405.md): Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting (CVSS 5.8)
- [CVE-2026-103404](https://cve.now/CVE-2026-103404.md): Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials (CVSS 6.8)
- [CVE-2026-103403](https://cve.now/CVE-2026-103403.md): Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting… (CVSS 8.8)
- [CVE-2026-103402](https://cve.now/CVE-2026-103402.md): Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and… (CVSS 8.8)
- [CVE-2026-103401](https://cve.now/CVE-2026-103401.md): Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root (CVSS 8.8)
- [CVE-2026-103400](https://cve.now/CVE-2026-103400.md): Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup (CVSS 5.5)
- [CVE-2026-103394](https://cve.now/CVE-2026-103394.md): Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates. (CVSS 3.7)
- [CVE-2026-103393](https://cve.now/CVE-2026-103393.md): Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing (CVSS 4.3)
- [CVE-2026-103392](https://cve.now/CVE-2026-103392.md): Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled (CVSS 4.8)
- [CVE-2026-103391](https://cve.now/CVE-2026-103391.md): Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature (CVSS 5.3)
- [CVE-2026-103390](https://cve.now/CVE-2026-103390.md): Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification (CVSS 5.3)
- [CVE-2026-101954](https://cve.now/CVE-2026-101954.md): Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled (CVSS 9.8)
- [CVE-2026-101952](https://cve.now/CVE-2026-101952.md): Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled (CVSS 7.5)
- [CVE-2026-101949](https://cve.now/CVE-2026-101949.md): Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash (CVSS 7.5)
- [CVE-2026-101964](https://cve.now/CVE-2026-101964.md): Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message (CVSS 6.5)
- [CVE-2026-101963](https://cve.now/CVE-2026-101963.md): Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used (CVSS 7.5)
- [CVE-2026-101962](https://cve.now/CVE-2026-101962.md): Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used (CVSS 7.5)
- [CVE-2026-101961](https://cve.now/CVE-2026-101961.md): Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy (CVSS 7.5)
- [CVE-2026-101959](https://cve.now/CVE-2026-101959.md): Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash (CVSS 6.5)
- [CVE-2026-101983](https://cve.now/CVE-2026-101983.md): Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured (CVSS 9.8)
- [CVE-2026-101982](https://cve.now/CVE-2026-101982.md): Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used (CVSS 9.8)
- [CVE-2026-101981](https://cve.now/CVE-2026-101981.md): Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled (CVSS 8.8)
- [CVE-2026-101979](https://cve.now/CVE-2026-101979.md): Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled (CVSS 8.8)
- [CVE-2026-101976](https://cve.now/CVE-2026-101976.md): Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash (CVSS 7.5)
- [CVE-2026-101975](https://cve.now/CVE-2026-101975.md): Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used (CVSS 6.5)
- [CVE-2026-101972](https://cve.now/CVE-2026-101972.md): Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled (CVSS 6.5)
- [CVE-2026-102077](https://cve.now/CVE-2026-102077.md): Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops (CVSS 7.5)
- [CVE-2026-33798](https://cve.now/CVE-2026-33798.md): Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled (CVSS 8.8)
- [CVE-2026-33796](https://cve.now/CVE-2026-33796.md): Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled (CVSS 9.8)
- [CVE-2026-33795](https://cve.now/CVE-2026-33795.md): Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised (CVSS 7.5)
- [CVE-2026-33792](https://cve.now/CVE-2026-33792.md): Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured (CVSS 9.8)
- [CVE-2026-33789](https://cve.now/CVE-2026-33789.md): Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service (CVSS 9.8)
- [CVE-2026-102185](https://cve.now/CVE-2026-102185.md): Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used (CVSS 7.5)
- [CVE-2026-102184](https://cve.now/CVE-2026-102184.md): Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash (CVSS 7.5)
- [CVE-2026-102183](https://cve.now/CVE-2026-102183.md): Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes (CVSS 7.5)
- [CVE-2026-102182](https://cve.now/CVE-2026-102182.md): Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution (CVSS 9.8)
- [CVE-2026-102180](https://cve.now/CVE-2026-102180.md): Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use (CVSS 7.5)
- [CVE-2026-102179](https://cve.now/CVE-2026-102179.md): Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used (CVSS 7.5)
- [CVE-2026-102178](https://cve.now/CVE-2026-102178.md): Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise (CVSS 9.8)
- [CVE-2026-102177](https://cve.now/CVE-2026-102177.md): Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used (CVSS 7.6)
- [CVE-2026-102176](https://cve.now/CVE-2026-102176.md): Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled (CVSS 8.8)
- [CVE-2026-102175](https://cve.now/CVE-2026-102175.md): Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used (CVSS 9.8)
- [CVE-2026-102174](https://cve.now/CVE-2026-102174.md): Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled (CVSS 8.8)
- [CVE-2026-102061](https://cve.now/CVE-2026-102061.md): Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used (CVSS 8.8)
- [CVE-2026-102060](https://cve.now/CVE-2026-102060.md): Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used (CVSS 6.5)
- [CVE-2026-102059](https://cve.now/CVE-2026-102059.md): Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information (CVSS 8.8)
- [CVE-2026-102058](https://cve.now/CVE-2026-102058.md): Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled (CVSS 6.5)
- [CVE-2026-102057](https://cve.now/CVE-2026-102057.md): Junos OS: An attacker causes DHCP service disruption during DHCP client operation (CVSS 7.5)
- [CVE-2026-102056](https://cve.now/CVE-2026-102056.md): Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled (CVSS 7.1)
- [CVE-2026-102055](https://cve.now/CVE-2026-102055.md): Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled (CVSS 8.8)
- [CVE-2026-102054](https://cve.now/CVE-2026-102054.md): Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured (CVSS 4.3)
- [CVE-2026-102053](https://cve.now/CVE-2026-102053.md): Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used (CVSS 5.3)
- [CVE-2026-102052](https://cve.now/CVE-2026-102052.md): Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used (CVSS 8.8)
- [CVE-2026-102051](https://cve.now/CVE-2026-102051.md): Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled (CVSS 6.5)
- [CVE-2026-102050](https://cve.now/CVE-2026-102050.md): Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled (CVSS 8.8)
- [CVE-2026-102049](https://cve.now/CVE-2026-102049.md): Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled (CVSS 8.8)
- [CVE-2026-102048](https://cve.now/CVE-2026-102048.md): Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled (CVSS 6.5)
- [CVE-2026-102047](https://cve.now/CVE-2026-102047.md): Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used (CVSS 6.5)
- [CVE-2026-102046](https://cve.now/CVE-2026-102046.md): Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used (CVSS 7.5)
- [CVE-2026-102045](https://cve.now/CVE-2026-102045.md): Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled (CVSS 6.5)
- [CVE-2026-102044](https://cve.now/CVE-2026-102044.md): Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled (CVSS 7.5)
- [CVE-2026-102043](https://cve.now/CVE-2026-102043.md): Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled (CVSS 6.5)
- [CVE-2026-102042](https://cve.now/CVE-2026-102042.md): Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled (CVSS 6.5)
- [CVE-2026-102041](https://cve.now/CVE-2026-102041.md): Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled (CVSS 6.5)
- [CVE-2026-102040](https://cve.now/CVE-2026-102040.md): Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used (CVSS 6.5)
- [CVE-2026-102039](https://cve.now/CVE-2026-102039.md): Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used (CVSS 6.5)
- [CVE-2026-102037](https://cve.now/CVE-2026-102037.md): Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used (CVSS 8.1)
- [CVE-2026-102036](https://cve.now/CVE-2026-102036.md): Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service (CVSS 7.5)
- [CVE-2026-102035](https://cve.now/CVE-2026-102035.md): Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled (CVSS 6.5)
- [CVE-2026-102034](https://cve.now/CVE-2026-102034.md): Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled (CVSS 6.5)
- [CVE-2026-102033](https://cve.now/CVE-2026-102033.md): Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled (CVSS 6.5)
- [CVE-2026-102032](https://cve.now/CVE-2026-102032.md): Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present (CVSS 6.5)
- [CVE-2026-102031](https://cve.now/CVE-2026-102031.md): Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled (CVSS 9.8)
- [CVE-2026-102030](https://cve.now/CVE-2026-102030.md): Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used (CVSS 7.5)
- [CVE-2026-102029](https://cve.now/CVE-2026-102029.md): Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion (CVSS 7.5)
- [CVE-2026-102028](https://cve.now/CVE-2026-102028.md): Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used (CVSS 7.5)
- [CVE-2026-102027](https://cve.now/CVE-2026-102027.md): Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed (CVSS 7.5)
- [CVE-2026-102026](https://cve.now/CVE-2026-102026.md): Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used (CVSS 7.5)
- [CVE-2026-102025](https://cve.now/CVE-2026-102025.md): Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used (CVSS 7.5)
- [CVE-2026-102024](https://cve.now/CVE-2026-102024.md): Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used (CVSS 7.5)
- [CVE-2026-102023](https://cve.now/CVE-2026-102023.md): Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used (CVSS 7.5)
- [CVE-2026-102022](https://cve.now/CVE-2026-102022.md): Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled (CVSS 7.5)
- [CVE-2026-102021](https://cve.now/CVE-2026-102021.md): Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled (CVSS 6.5)
- [CVE-2026-102020](https://cve.now/CVE-2026-102020.md): Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled (CVSS 7.5)
- [CVE-2026-102019](https://cve.now/CVE-2026-102019.md): Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled (CVSS 6.5)
- [CVE-2026-102018](https://cve.now/CVE-2026-102018.md): Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled (CVSS 6.5)
- [CVE-2026-102017](https://cve.now/CVE-2026-102017.md): Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled (CVSS 6.5)
- [CVE-2026-102016](https://cve.now/CVE-2026-102016.md): Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled (CVSS 7.5)
- [CVE-2026-102015](https://cve.now/CVE-2026-102015.md): Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used (CVSS 8.8)
- [CVE-2026-102014](https://cve.now/CVE-2026-102014.md): Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used (CVSS 8.8)
- [CVE-2026-102013](https://cve.now/CVE-2026-102013.md): Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used (CVSS 4.4)
- [CVE-2026-102012](https://cve.now/CVE-2026-102012.md): Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled (CVSS 7.5)
- [CVE-2026-102011](https://cve.now/CVE-2026-102011.md): Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled (CVSS 6.5)
- [CVE-2026-102000](https://cve.now/CVE-2026-102000.md): Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled (CVSS 6.5)
- [CVE-2026-101999](https://cve.now/CVE-2026-101999.md): Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled (CVSS 6.5)
- [CVE-2026-101971](https://cve.now/CVE-2026-101971.md): Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled (CVSS 6.5)
- [CVE-2026-101970](https://cve.now/CVE-2026-101970.md): Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used (CVSS 6.5)
- [CVE-2026-101969](https://cve.now/CVE-2026-101969.md): Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled (CVSS 6.5)
- [CVE-2026-101968](https://cve.now/CVE-2026-101968.md): Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled (CVSS 5.4)
- [CVE-2026-101946](https://cve.now/CVE-2026-101946.md): Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used (CVSS 3.5)
- [CVE-2026-101945](https://cve.now/CVE-2026-101945.md): Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled (CVSS 7.5)
- [CVE-2026-101944](https://cve.now/CVE-2026-101944.md): Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used (CVSS 7.5)
- [CVE-2026-101943](https://cve.now/CVE-2026-101943.md): Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured (CVSS 7.5)
- [CVE-2026-101942](https://cve.now/CVE-2026-101942.md): Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used (CVSS 7.5)
- [CVE-2026-101941](https://cve.now/CVE-2026-101941.md): Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled (CVSS 7.5)
- [CVE-2026-101940](https://cve.now/CVE-2026-101940.md): Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled (CVSS 7.5)
- [CVE-2026-101939](https://cve.now/CVE-2026-101939.md): Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used (CVSS 7.5)
- [CVE-2026-101938](https://cve.now/CVE-2026-101938.md): Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used (CVSS 6.5)
- [CVE-2026-101937](https://cve.now/CVE-2026-101937.md): Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used (CVSS 6.5)
- [CVE-2026-101936](https://cve.now/CVE-2026-101936.md): Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled (CVSS 6.5)
- [CVE-2026-101934](https://cve.now/CVE-2026-101934.md): Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd (CVSS 4.4)
- [CVE-2026-101927](https://cve.now/CVE-2026-101927.md): Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation (CVSS 7.8)
- [CVE-2026-101984](https://cve.now/CVE-2026-101984.md): Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured (CVSS 6.5)
- [CVE-2026-101987](https://cve.now/CVE-2026-101987.md): Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used (CVSS 6.5)
- [CVE-2026-101988](https://cve.now/CVE-2026-101988.md): Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled (CVSS 6.5)
- [CVE-2026-101989](https://cve.now/CVE-2026-101989.md): Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled (CVSS 6.5)
- [CVE-2026-101990](https://cve.now/CVE-2026-101990.md): Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised (CVSS 9.8)
- [CVE-2026-101992](https://cve.now/CVE-2026-101992.md): Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used (CVSS 6.5)
- [CVE-2026-101993](https://cve.now/CVE-2026-101993.md): Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used (CVSS 6.5)
- [CVE-2026-101994](https://cve.now/CVE-2026-101994.md): Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash (CVSS 7.1)
- [CVE-2026-101996](https://cve.now/CVE-2026-101996.md): Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured (CVSS 6.5)
- [CVE-2026-102064](https://cve.now/CVE-2026-102064.md): Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used (CVSS 7.5)
- [CVE-2026-102066](https://cve.now/CVE-2026-102066.md): Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled (CVSS 6.5)
- [CVE-2026-102071](https://cve.now/CVE-2026-102071.md): Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled (CVSS 6.5)
- [CVE-2026-101950](https://cve.now/CVE-2026-101950.md): Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled (CVSS 9.8)
- [CVE-2026-101955](https://cve.now/CVE-2026-101955.md): Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used (CVSS 8.1)
- [CVE-2026-101997](https://cve.now/CVE-2026-101997.md): Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication (CVSS 8.1)
- [CVE-2026-102062](https://cve.now/CVE-2026-102062.md): Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used (CVSS 8.1)
- [CVE-2026-102078](https://cve.now/CVE-2026-102078.md): Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash (CVSS 5.9)
- [CVE-2026-102079](https://cve.now/CVE-2026-102079.md): Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection (CVSS 7.8)
- [CVE-2026-102080](https://cve.now/CVE-2026-102080.md): Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover (CVSS 5.3)
- [CVE-2026-102081](https://cve.now/CVE-2026-102081.md): Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic (CVSS 7.5)
- [CVE-2026-102082](https://cve.now/CVE-2026-102082.md): Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs (CVSS 5.9)
- [CVE-2026-102083](https://cve.now/CVE-2026-102083.md): Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash (CVSS 5.9)
- [CVE-2026-102084](https://cve.now/CVE-2026-102084.md): Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution (CVSS 8.1)
- [CVE-2026-102085](https://cve.now/CVE-2026-102085.md): Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVSS 6.5)
- [CVE-2026-102086](https://cve.now/CVE-2026-102086.md): Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash (CVSS 5.9)
- [CVE-2026-102087](https://cve.now/CVE-2026-102087.md): Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes (CVSS 6.5)
- [CVE-2026-103993](https://cve.now/CVE-2026-103993.md): Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes (CVSS 6.8)
- [CVE-2026-101991](https://cve.now/CVE-2026-101991.md): Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled (CVSS 3.1)
- [CVE-2026-101986](https://cve.now/CVE-2026-101986.md): Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution (CVSS 9.8)
- [CVE-2026-101951](https://cve.now/CVE-2026-101951.md): Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised (CVSS 7.5)
- [CVE-2026-101957](https://cve.now/CVE-2026-101957.md): Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used (CVSS 7.5)
- [CVE-2026-102065](https://cve.now/CVE-2026-102065.md): Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled (CVSS 7.5)
- [CVE-2026-101974](https://cve.now/CVE-2026-101974.md): Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used (CVSS 6.5)
- [CVE-2026-102067](https://cve.now/CVE-2026-102067.md): Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used (CVSS 6.5)
- [CVE-2026-101995](https://cve.now/CVE-2026-101995.md): Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption (CVSS 4.3)
- [CVE-2026-101948](https://cve.now/CVE-2026-101948.md): Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used (CVSS 7.5)
- [CVE-2026-101977](https://cve.now/CVE-2026-101977.md): Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used (CVSS 7.5)
- [CVE-2026-101956](https://cve.now/CVE-2026-101956.md): Junos OS: Unauthorized root command execution when J-Web is enabled (CVSS 9.8)
- [CVE-2026-101980](https://cve.now/CVE-2026-101980.md): Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled (CVSS 9.8)
- [CVE-2026-102069](https://cve.now/CVE-2026-102069.md): Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled (CVSS 8.8)
- [CVE-2026-102070](https://cve.now/CVE-2026-102070.md): Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used (CVSS 7.5)
- [CVE-2026-101973](https://cve.now/CVE-2026-101973.md): Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used (CVSS 7.5)
- [CVE-2026-102072](https://cve.now/CVE-2026-102072.md): Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled (CVSS 6.5)
- [CVE-2026-103994](https://cve.now/CVE-2026-103994.md): Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution (CVSS 8.8)
- [CVE-2026-102063](https://cve.now/CVE-2026-102063.md): Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used (CVSS 6.5)
- [CVE-2026-101965](https://cve.now/CVE-2026-101965.md): Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled (CVSS 8.8)
- [CVE-2026-101967](https://cve.now/CVE-2026-101967.md): Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used (CVSS 8.8)
- [CVE-2026-102068](https://cve.now/CVE-2026-102068.md): Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used (CVSS 7.5)
- [CVE-2026-101960](https://cve.now/CVE-2026-101960.md): Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled (CVSS 6.5)
- [CVE-2026-101978](https://cve.now/CVE-2026-101978.md): Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used (CVSS 8.8)
- [CVE-2026-101985](https://cve.now/CVE-2026-101985.md): Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled (CVSS 6.5)
- [CVE-2026-101966](https://cve.now/CVE-2026-101966.md): Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service (CVSS 8.2)
- [CVE-2026-57054](https://cve.now/CVE-2026-57054.md): Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs (CVSS 5.8)
- [CVE-2026-57032](https://cve.now/CVE-2026-57032.md): Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash (CVSS 6.5)
- [CVE-2026-57031](https://cve.now/CVE-2026-57031.md): Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect (CVSS 4.7)
- [CVE-2026-57030](https://cve.now/CVE-2026-57030.md): Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS (CVSS 5.9)
- [CVE-2026-57029](https://cve.now/CVE-2026-57029.md): Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash (CVSS 5.3)
- [CVE-2026-57028](https://cve.now/CVE-2026-57028.md): Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVSS 7.3)
- [CVE-2026-57027](https://cve.now/CVE-2026-57027.md): Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash (CVSS 6.5)
- [CVE-2026-57026](https://cve.now/CVE-2026-57026.md): Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash (CVSS 7.5)
- [CVE-2026-57025](https://cve.now/CVE-2026-57025.md): Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash (CVSS 5.5)
- [CVE-2026-57024](https://cve.now/CVE-2026-57024.md): Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously (CVSS 5.3)
- [CVE-2026-57023](https://cve.now/CVE-2026-57023.md): Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash (CVSS 7.5)
- [CVE-2026-57022](https://cve.now/CVE-2026-57022.md): Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE (CVSS 5.9)
- [CVE-2026-57021](https://cve.now/CVE-2026-57021.md): Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash (CVSS 5.3)
- [CVE-2026-57020](https://cve.now/CVE-2026-57020.md): Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood (CVSS 6.5)
- [CVE-2026-57019](https://cve.now/CVE-2026-57019.md): Junos OS: MX Series: Specific traffic causes an FPC to reset (CVSS 6.5)
- [CVE-2026-33803](https://cve.now/CVE-2026-33803.md): Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVSS 6.5)
- [CVE-2026-33802](https://cve.now/CVE-2026-33802.md): Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command (CVSS 5.5)
- [CVE-2026-33801](https://cve.now/CVE-2026-33801.md): Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes (CVSS 6.5)
- [CVE-2026-33800](https://cve.now/CVE-2026-33800.md): Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash (CVSS 6.5)
- [CVE-2026-33799](https://cve.now/CVE-2026-33799.md): Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash (CVSS 4.3)
- [CVE-2026-33794](https://cve.now/CVE-2026-33794.md): Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash (CVSS 5.9)
- [CVE-2026-21901](https://cve.now/CVE-2026-21901.md): Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash (CVSS 4.4)
- [CVE-2026-33791](https://cve.now/CVE-2026-33791.md): Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root (CVSS 6.7)
- [CVE-2026-33790](https://cve.now/CVE-2026-33790.md): Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart. (CVSS 7.5)
- [CVE-2026-33787](https://cve.now/CVE-2026-33787.md): Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes (CVSS 5.5)
- [CVE-2026-33785](https://cve.now/CVE-2026-33785.md): Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario (CVSS 8.8)
- [CVE-2026-33784](https://cve.now/CVE-2026-33784.md): JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access (CVSS 9.8)
- [CVE-2026-33783](https://cve.now/CVE-2026-33783.md): Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes (CVSS 6.5)
- [CVE-2026-33781](https://cve.now/CVE-2026-33781.md): Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/juniper-networks
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.