JO
Network Security
Junos OS
On CISA KEVExploited in the wild
933
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 394Medium 54Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21918 | 7.5 | Jan 15 | Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes Affected: before 22.4R3-S7; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; 24.2 before 24.2R2 |
| CVE-2026-21917 | 7.5 | Jan 15 | Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash Affected: 23.2R2-S2 before 23.2R2-S5; 23.4R2-S1 before 23.4R2-S5; 24.2 before 24.2R2-S2; 24.4 before 24.4R1-S3, 24.4R2 |
| CVE-2026-21914 | 7.5 | Jan 15 | Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash Affected: before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S3; 24.4 before 24.4R2-S2; 25.2 before 25.2R1-S1, 25.2R2 |
| CVE-2026-21913 | 7.5 | Jan 15 | Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart Affected: 24.4 before 24.4R2; 25.2 before 25.2R1-S2, 25.2R2 |
| CVE-2026-21906 | 7.5 | Jan 15 | Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash Affected: before 21.4R3-S12; 22.4 before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S5; 24.2 before 24.2R2-S3; 24.4 before 24.4R2-S1; +1 more |
| CVE-2026-21905 | 7.5 | Jan 15 | Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash Affected: before 21.2R3-S10; 21.4 before 21.4R3-S12; 22.4 before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S3; +2 more |
| CVE-2025-60003 | 7.5 | Jan 15 | Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash Affected: before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S2; 24.4 before 24.4R2 |
| CVE-2025-60004 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash Affected: 23.4R2-S3 before 23.4R2-S5; 24.2R2 before 24.2R2-S1; 24.4R1 before 24.4R1-S3, 24.4R2 |
| CVE-2025-59964 | 7.5 | Oct 9 | Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart Affected: 24.4 before 24.4R1-S3, 24.4R2 |
| CVE-2025-52981 | 7.5 | Jul 11 | Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S11; 22.2 before 22.2R3-S7; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S4; 23.4 before 23.4R2-S4; +1 more |
| CVE-2025-52980 | 7.5 | Jul 11 | Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message Affected: 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; 23.2 before 23.2R2; 23.4 before 23.4R2 |
| CVE-2025-52946 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash Affected: before 21.2R3-S9; 21.4; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more |
| CVE-2025-30660 | 7.5 | Apr 9 | Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset Affected: before 21.2R3-S9; 21.4 before 21.4R3-S8; 22.2 before 22.2R3-S4; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S2; 23.4 before 23.4R2 |
| CVE-2025-30659 | 7.5 | Apr 9 | Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic Affected: 21.4R1 before 21.4*; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; 24.2 before 24.2R2 |
| CVE-2025-30658 | 7.5 | Apr 9 | Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; +1 more |
| CVE-2025-30656 | 7.5 | Apr 9 | Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; +1 more |
| CVE-2025-30651 | 7.5 | Apr 9 | Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S2; 23.4 before 23.4R2 |
| CVE-2025-30649 | 7.5 | Apr 9 | Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS. Affected: before 22.2R3-S6; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; 24.2 before 24.2R1-S2, 24.2R2 |
| CVE-2025-30645 | 7.5 | Apr 9 | Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S9; 22.2 before 22.2R3-S5; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2 |
| CVE-2025-30644 | 7.5 | Apr 9 | Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled Affected: before 21.4R3-S9; 22.2 before 22.2R3-S5; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; 24.2 before 24.2R2 |
| CVE-2025-21601 | 7.5 | Apr 9 | Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device Affected: before 21.4R3-S9; 22.2 before 22.2R3-S5; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; 24.2 before 24.2R1-S1, 24.2R2 |
| CVE-2025-21594 | 7.5 | Apr 9 | Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block Affected: before 21.2R3-S8; 21.4 before 21.4R3-S7; 22.1 before 22.1R3-S6; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; +2 more |
| CVE-2024-39564 | 7.5 | Feb 5 | Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash Affected: 22.4 before 22.4R3-S4 |
| CVE-2025-21598 | 7.5 | Jan 9 | Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash Affected: 21.2R3-S8 before 21.2R3-S9; 21.4R3-S7 before 21.4R3-S9; 22.2R3-S4 before 22.2R3-S5; 22.3R3-S2 before 22.3R3-S4; 22.4R3 before 22.4R3-S5; 23.2R2 before 23.2R2-S2; +2 more |
| CVE-2024-47504 | 7.5 | Oct 11 | Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash Affected: 22.2 before 22.2R3-S5; 22.3 before 22.3R3-S4; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S2; 23.4 before 23.4R2-S1; 24.2 before 24.2R1-S1, 24.2R2 |
| CVE-2024-47499 | 7.5 | Oct 11 | Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash Affected: before 21.2R3-S8; 21.4 before 21.4R3-S8; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; 23.2 before 23.2R2-S1; +1 more |
| CVE-2024-47497 | 7.5 | Oct 11 | Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion Affected: before 21.4R3-S7; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; 23.2 before 23.2R2-S1; 23.4 before 23.4R1-S2, 23.4R2 |
| CVE-2024-39547 | 7.5 | Oct 11 | Junos OS and Junos OS Evolved: cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization Affected: before 21.2R3-S8; 21.4 before 21.4R3-S7; 22.1 before 22.1R3-S6; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; +2 more |
| CVE-2024-39525 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash Affected: before 21.2R3-S8; 21.4 before 21.4R3-S8; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S4; 22.4 before 22.4R3-S3; 23.2 before 23.2R2-S1; +1 more |
| CVE-2024-39516 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash Affected: before 21.4R3-S8; 22.2 before 22.2R3-S5; 22.3 before 22.3R3-S4; 22.4 before 22.4R3-S3; 23.2 before 23.2R2-S2; 23.4 before 23.4R2 |
| CVE-2024-39515 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash Affected: before 21.4R3-S8; 22.2 before 22.2R3-S5; 22.3 before 22.3R3-S4; 22.4 before 22.4R3-S3; 23.2 before 23.2R2-S2; 23.4 before 23.4R2 |
| CVE-2024-39552 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crash Affected: before 20.4R3-S9; 21.2 before 21.2R3-S7; 21.3 before 21.3R3-S6; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S4; 22.2 before 22.2R3-S3; +3 more |
| CVE-2024-39551 | 7.5 | Jul 11 | Junos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop Affected: 20.4 before 20.4R3-S10; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S4; 22.2 before 22.2R3-S2; +3 more |
| CVE-2024-39549 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to a memory leak Affected: before 21.2R3-S8; 21.4 before 21.4R3-S8; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S3; 23.2 before 23.2R2-S1; +1 more |
| CVE-2024-39545 | 7.5 | Jul 11 | Junos OS: SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash Affected: before 21.2R3-S8; 21.4 before 21.4R3-S7; 22.1 before 22.1R3-S2; 22.2 before 22.2R3-S1; 22.3 before 22.3R2-S1, 22.3R3; 22.4 before 22.4R1-S2, 22.4R2, 22.4R3 |
| CVE-2024-39542 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crash Affected: before 21.2R3-S4; 21.4 before 21.4R2; 22.2 before 22.2R2-S1, 22.2R3 |
| CVE-2024-39540 | 7.5 | Jul 11 | Junos OS: SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash Affected: 21.2R3-S5 before 21.2R3-S6 |
| CVE-2024-39530 | 7.5 | Jul 11 | Junos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash Affected: 21.4R3 before 21.4R3-S5; 22.1R3 before 22.1R3-S4; 22.2R2 before 22.2R3; 22.3R1 before 22.3R2-S2, 22.3R3; 22.4R1 before 22.4R2 |
| CVE-2024-39529 | 7.5 | Jul 11 | Junos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash Affected: before 21.4R3-S6; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S3; 22.4 before 22.4R3; 23.2 before 23.2R2 |
| CVE-2024-39518 | 7.5 | Jul 10 | Junos OS: MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface Affected: 21.2R3-S5 before 21.2R3-S7; 21.4R3-S4 before 21.4R3-S6; 22.2R3 before 22.2R3-S4; 22.3R2 before 22.3R3-S2; 22.4R1 before 22.4R3; 23.2R1 before 23.2R2 |
| CVE-2024-39555 | 7.5 | Jul 10 | Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to reset Affected: before 21.4R3-S8; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S3; 23.2 before 23.2R2-S1; 23.4 before 23.4R1-S2, 23.4R2 |
| CVE-2024-21586 | 7.5 | Jul 1 | Junos OS: SRX Series and NFX Series: Specific valid traffic leads to a PFE crash Affected: 21.4 before 21.4R3-S7.9; 22.1 before 22.1R3-S5.3; 22.2 before 22.2R3-S4.11; 22.3 before 22.3R3; 22.4 before 22.4R3; 21.4 before 21.4R3-S8; +4 more |
| CVE-2024-30398 | 7.5 | Apr 12 | Junos OS: SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash Affected: 21.2 before 21.2R3-S7; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S5; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S2; 22.4 before 22.4R3; +1 more |
| CVE-2024-30397 | 7.5 | Apr 12 | Junos OS: An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process Affected: before 20.4R3-S10; 21.2 before 21.2R3-S7; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S1; +2 more |
| CVE-2024-30382 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: RPD crash when CoS-based forwarding (CBF) policy is configured Affected: before 20.4R3-S10; 21.2 before 21.2R3-S8; 21.3 before 21.3R3; 21.4 before 21.4R3; 22.1 before 22.1R2 |
| CVE-2024-30392 | 7.5 | Apr 12 | Junos OS: MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs Affected: before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S3; 22.2 before 22.2R3-S1; 22.3 before 22.3R2-S2, 22.3R3; +1 more |
| CVE-2024-30394 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: A specific EVPN type-5 route causes rpd crash Affected: before 21.2R3-S7; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; 22.2 before 22.2R3-S2; 22.3 before 22.3R3-S1; 22.4 before 22.4R3; +1 more |
| CVE-2024-30395 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash Affected: before 21.2R3-S7; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S5; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S2; +2 more |
| CVE-2024-30405 | 7.5 | Apr 12 | Junos OS: SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service Affected: before 21.2R3-S7; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S5; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S2; 22.4 before 22.4R3; +1 more |
| CVE-2024-21598 | 7.5 | Apr 12 | Junos OS and Junos OS Evolved: A malformed BGP tunnel encapsulation attribute will lead to an rpd crash Affected: 20.4 before 20.4R3-S9; 21.2 before 21.2R3-S7; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; 22.2 before 22.2R3-S3; +3 more |
The 500 most important CVEs for this product (exploited first, then by severity)