Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-101987Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
- CVE-2026-101988Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
- CVE-2026-101989Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
- CVE-2026-101990Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
- CVE-2026-101992Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
- CVE-2026-101993Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
- CVE-2026-101994Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
- CVE-2026-101996Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
- CVE-2026-102064Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used
- CVE-2026-102066Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled
- CVE-2026-102071Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled
- CVE-2026-101950Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled
- CVE-2026-101955Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used
- CVE-2026-101997Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
- CVE-2026-102062Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
- CVE-2026-102078Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash
- CVE-2026-102079Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
- CVE-2026-102080Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover
- CVE-2026-102081Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic
- CVE-2026-102082Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs
- CVE-2026-102083Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash
- CVE-2026-102084Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution
- CVE-2026-102085Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- CVE-2026-102086Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash
- CVE-2026-102087Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes
- CVE-2026-103993Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes
- CVE-2026-101991Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
- CVE-2026-101986Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
- CVE-2026-101951Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised
- CVE-2026-101957Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used