Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-102065Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled
- CVE-2026-101974Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
- CVE-2026-102067Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used
- CVE-2026-101995Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
- CVE-2026-101948Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
- CVE-2026-101977Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
- CVE-2026-101956Junos OS: Unauthorized root command execution when J-Web is enabled
- CVE-2026-101980Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled
- CVE-2026-102069Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled
- CVE-2026-102070Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used
- CVE-2026-101973Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used
- CVE-2026-102072Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled
- CVE-2026-103994Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution
- CVE-2026-102063Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used
- CVE-2026-101965Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled
- CVE-2026-101967Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used
- CVE-2026-102068Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
- CVE-2026-101960Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled
- CVE-2026-101978Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used
- CVE-2026-101985Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled
- CVE-2026-101966Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service
- CVE-2026-57054Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs
- CVE-2026-57032Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash
- CVE-2026-57031Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect
- CVE-2026-57030Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS
- CVE-2026-57029Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
- CVE-2026-57028Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- CVE-2026-57027Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash
- CVE-2026-57026Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash
- CVE-2026-57025Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash