CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product juniper_networks:junos_os. Show all products

148 CVEs, showing 1 to 50Page 1 of 3Next
CVESeverityTitlePublished
CVE-2026-101954Critical 9.8Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-101952High 7.5Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-101949High 7.5Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash
Assigned by juniper
Oct 14, 2026
CVE-2026-101964Medium 6.5Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
Assigned by juniper
Oct 14, 2026
CVE-2026-101963High 7.5Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used
Assigned by juniper
Oct 14, 2026
CVE-2026-101962High 7.5Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used
Assigned by juniper
Oct 14, 2026
CVE-2026-101961High 7.5Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy
Assigned by juniper
Oct 14, 2026
CVE-2026-101959Medium 6.5Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
Assigned by juniper
Oct 14, 2026
CVE-2026-101983Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
Assigned by juniper
Oct 14, 2026
CVE-2026-101982Critical 9.8Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
Assigned by juniper
Oct 14, 2026
CVE-2026-101981High 8.8Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-101979High 8.8Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-101976High 7.5Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash
Assigned by juniper
Oct 14, 2026
CVE-2026-101975Medium 6.5Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used
Assigned by juniper
Oct 14, 2026
CVE-2026-101972Medium 6.5Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102077High 7.5Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops
Assigned by juniper
Oct 14, 2026
CVE-2026-33798High 8.8Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-33796Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-33795High 7.5Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
Assigned by juniper
Oct 14, 2026
CVE-2026-33792Critical 9.8Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured
Assigned by juniper
Oct 14, 2026
CVE-2026-33789Critical 9.8Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
Assigned by juniper
Oct 14, 2026
CVE-2026-102185High 7.5Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102184High 7.5Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash
Assigned by juniper
Oct 14, 2026
CVE-2026-102183High 7.5Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes
Assigned by juniper
Oct 14, 2026
CVE-2026-102182Critical 9.8Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
Assigned by juniper
Oct 14, 2026
CVE-2026-102180High 7.5Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
Assigned by juniper
Oct 14, 2026
CVE-2026-102179High 7.5Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102178Critical 9.8Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise
Assigned by juniper
Oct 14, 2026
CVE-2026-102177High 7.6Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102176High 8.8Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102175Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102174High 8.8Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102061High 8.8Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102060Medium 6.5Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102059High 8.8Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information
Assigned by juniper
Oct 14, 2026
CVE-2026-102058Medium 6.5Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102057High 7.5Junos OS: An attacker causes DHCP service disruption during DHCP client operation
Assigned by juniper
Oct 14, 2026
CVE-2026-102056High 7.1Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102055High 8.8Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102054Medium 4.3Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
Assigned by juniper
Oct 14, 2026
CVE-2026-102053Medium 5.3Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102052High 8.8Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102051Medium 6.5Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102050High 8.8Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102049High 8.8Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102048Medium 6.5Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102047Medium 6.5Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102046High 7.5Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
Assigned by juniper
Oct 14, 2026
CVE-2026-102044High 7.5Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-102043Medium 6.5Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
Assigned by juniper
Oct 14, 2026
Page 1 of 3Next

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.