JO
Product
Junos OS Evolved
by Juniper Networks · last CVE Oct 14, 2026
198
CVEs
0
On KEV
9.8
Max CVSS
121
New 30D
Severity mix
Critical 11High 78Medium 107Low 2
Watch

Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102045
6.5
0%
Oct 14
Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
Affected: 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO
CVE-2026-102043
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102042
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102041
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102040
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102039
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102035
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102034
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102033
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102032
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present
Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-102021
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
Affected: 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO
CVE-2026-102019
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102018
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102017
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102011
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102000
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101999
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101971
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101970
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101969
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101938
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101984
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101987
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101988
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-101989
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101992
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101993
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101996
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102066
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102071
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102085
6.5
0%
Oct 14
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S4-EVO; 25.2 before 25.2R2-S1-EVO; 25.4 before 25.4R1-S1-EVO
CVE-2026-102087
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes
Affected: before 23.2R2-S6-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO
CVE-2026-101974
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102067
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101960
6.5
0%
Oct 14
Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled
Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-101985
6.5
0%
Oct 14
Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled
Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-33803
6.5
0%
Jul 9
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
Affected: before 23.2R2-S7-EVO; 23.4 before 23.4R2-S8-EVO; 24.2 before 24.2R2-S5-EVO; 24.4 before 24.4R2-S4-EVO; 25.2 before 25.2R2-S1-EVO; 25.4 before 25.4R1-S2-EVO
CVE-2026-33801
6.5
0%
Jul 9
Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
Affected: 25.2 before 25.2R2-EVO
CVE-2026-33783
6.5
0%
Apr 9
Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes
Affected: before 22.4R3-S9-EVO; 23.2 before 23.2R2-S6-EVO; 23.4 before 23.4R2-S7-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S2-EVO; 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO
CVE-2026-33780
6.5
0%
Apr 9
Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald
Affected: all version prior to before 22.4R3-S5-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S4-EVO; 24.2 before 24.2R2-EVO
CVE-2026-21919
6.5
0%
Apr 9
Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability
Affected: 23.4 before 23.4R2-S5-EVO; 24.2 before 24.2R2-S1-EVO; 24.4 before 24.4R1-S3-EVO, 24.4R2-EVO
CVE-2025-59969
6.5
0%
Apr 9
Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-EVO; 24.2 before 24.2R2-EVO; 24.4 before 24.4R2-EVO; 22.2 before 22.2R3-S7-EVO; +5 more
CVE-2026-21921
6.5
0%
Jan 15
Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-EVO
CVE-2026-21911
6.5
0%
Jan 15
Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop
Affected: before 21.4R3-S7-EVO; 22.2 before 22.2R3-S4-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4R3-S2-EVO; 23.2 before 23.2R2-S1-EVO; 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO
CVE-2026-21909
6.5
0%
Jan 15
Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash
Affected: 23.2 before 23.2R2-EVO; 23.4 before 23.4R1-S2-EVO, 23.4R2-EVO; 24.1 before 24.1R2-EVO
CVE-2025-59967
6.5
0%
Oct 9
Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts
Affected: 23.2R2-EVO before 23.2R2-S4-EVO; 23.4R1-EVO before 23.4R2-EVO
CVE-2025-59958
6.5
0%
Oct 9
Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE
Affected: before 22.4R3-EVO; 23.2 before 23.2R2-EVO
CVE-2025-52961
6.5
0%
Oct 9
Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart
Affected: 23.2R1-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO; 24.4-EVO before 24.4R1-S2-EVO, 24.4R2-EVO
CVE-2025-52964
6.5
0%
Jul 11
Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured
Affected: before 21.4R3-S7-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4R3-S5-EVO; 23.2 before 23.2R2-EVO; 23.4 before 23.4R2-EVO
CVE-2025-52953
6.5
0%
Jul 11
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset
Affected: before 22.2R3-S7-EVO; 22.4-EVO before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO; 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO
Page 3 of 4 · 198 total