Juniper Networks vulnerabilities
1,089 CVEs and advisories name Juniper Networks as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-33773Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied
- CVE-2026-33786Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes
- CVE-2026-21916Junos OS: A low privileged user can escalate their privileges so that they can login as root
- CVE-2026-33788Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs
- CVE-2026-21919Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability
- CVE-2026-21915JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root
- CVE-2026-21904Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection
- CVE-2025-59969Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart
- CVE-2026-33793Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system
- CVE-2025-30650Junos OS: Privileged local user can gain access to a Linux-based FPC as root
- CVE-2026-21902Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root
- CVE-2025-21589Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerability
- CVE-2026-21921Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash
- CVE-2026-21920Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash
- CVE-2026-21918Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes
- CVE-2026-21917Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash
- CVE-2026-21914Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash
- CVE-2026-21913Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart
- CVE-2026-21912Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset
- CVE-2026-21911Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop
- CVE-2026-21910Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop
- CVE-2026-21909Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash
- CVE-2026-21908Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process
- CVE-2026-21907Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)
- CVE-2026-21906Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash
- CVE-2026-21905Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash
- CVE-2026-21903Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash
- CVE-2026-0203Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart
- CVE-2025-60011Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap
- CVE-2025-60007Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash