Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-57024Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
- CVE-2026-57023Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash
- CVE-2026-57022Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE
- CVE-2026-57021Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash
- CVE-2026-57020Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood
- CVE-2026-57019Junos OS: MX Series: Specific traffic causes an FPC to reset
- CVE-2026-33803Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- CVE-2026-33802Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command
- CVE-2026-33801Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
- CVE-2026-33800Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
- CVE-2026-33799Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
- CVE-2026-33794Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
- CVE-2026-21901Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash
- CVE-2026-33791Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
- CVE-2026-33790Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.
- CVE-2026-33787Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes
- CVE-2026-33785Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario
- CVE-2026-33784JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access
- CVE-2026-33783Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes
- CVE-2026-33781Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed
- CVE-2026-33778Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes
- CVE-2026-33776Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information
- CVE-2026-33774Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect
- CVE-2026-33771CTP OS: Configuring password requirements does not work which permits the use of weak passwords
- CVE-2025-13914Apstra: SSH host key validation vulnerability for managed devices
- CVE-2026-33797Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset
- CVE-2026-33779Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication
- CVE-2026-33775Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd
- CVE-2026-33782Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts
- CVE-2026-33780Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald