Login Request a demo
JO
Product
Junos OS Evolved
by Juniper Networks · last CVE Oct 14, 2026
198
CVEs
0
On KEV
9.8
Max CVSS
121
New 30D
Vulnerabilities198In the news0Timeline
Severity mix
Critical 11High 78Medium 107Low 2
Severity
All severities198Critical11High78Medium107Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-52955
6.5
0%
Jul 11
Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart
Affected: before 21.2*-EVO; 21.4 before 21.4*-EVO; 22.2 before 22.2*-EVO; 22.4 before 22.4R3-S7-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S4-EVO; +1 more
CVE-2025-52949
6.5
0%
Jul 11
Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash
Affected: before 22.2R3-S7-EVO; 22.4-EVO before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S5-EVO; 24.2-EVO before 24.2R2-S1-EVO; 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO
CVE-2025-30653
6.5
0%
Apr 9
Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash
Affected: before 22.2R3-S4-EVO; 22.4-EVO before 22.4R3-S2-EVO; 23.2-EVO before 23.2R2-EVO; 23.4-EVO before 23.4R2-EVO
CVE-2025-30646
6.5
0%
Apr 9
Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash
Affected: before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S6-EVO; 22.4-EVO before 22.4R3-S6-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO
CVE-2025-21595
6.5
0%
Apr 9
Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash
Affected: before 21.2R3-S7-EVO; 21.4-EVO before 21.4R3-S4-EVO; 22.2-EVO before 22.2R3-S1-EVO; 22.3-EVO before 22.3R3-S1-EVO; 22.4-EVO before 22.4R3-EVO
CVE-2025-21600
6.5
0%
Jan 9
Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash
Affected: 21.4-EVO before 21.4R3-S9-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S4-EVO; 22.4-EVO before 22.4R3-S5-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S2-EVO; +1 more
CVE-2025-21602
6.5
0%
Jan 9
Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash
Affected: 21.4 before 21.4R3-S9-EVO; 22.2 before 22.2R3-S5-EVO; 22.3 before 22.3R3-S4-EVO; 22.4 before 22.4R3-S5-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S3-EVO; +1 more
CVE-2025-21593
6.5
0%
Jan 9
Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash
Affected: before 21.2R3-S9-EVO; 21.4-EVO before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S4-EVO; 22.4-EVO before 22.4R3-S3-EVO; 23.2-EVO before 23.2R2-S2-EVO; +1 more
CVE-2022-22250
6.5
0%
Oct 18
Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote
Affected: before 20.4R3-S3-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO; 21.4-EVO before 21.4R1-S1-EVO, 21.4R2-EVO
CVE-2022-22238
6.5
0%
Oct 18
Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed
Affected: before 20.2R3-S3-EVO; 20.3R1-EVO before 20.3-EVO*; 20.4-EVO before 20.4R3-S1-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2R1-EVO before 21.2-EVO*; 21.3-EVO before 21.3R2-EVO
CVE-2022-22230
6.5
0%
Oct 18
Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs
Affected: before 20.4R3-S5-EVO; 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-S1-EVO; 21.3-EVO before 21.3R3-S2-EVO; 21.4-EVO before 21.4R2-EVO; 22.1-EVO before 22.1R2-EVO; +1 more
CVE-2022-22224
6.5
0%
Oct 18
Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV
Affected: before 20.4R3-S3-EVO; 21.1 before 21.1R2-EVO
CVE-2026-33794
5.9
0%
Jul 9
Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
Affected: 24.4R2-EVO before 24.4R2-S3-EVO; 25.2 before 25.2R2, 25.2R2-EVO
CVE-2025-52984
5.9
0%
Jul 11
Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes
Affected: before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO
CVE-2022-22225
5.9
1%
Oct 18
Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash
Affected: before 20.4R3-S4-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R2-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2022-22220
5.9
1%
Oct 18
Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route
Affected: before 20.4R2-EVO; 21.1-EVO before 21.1R2-EVO
CVE-2022-22219
5.9
1%
Oct 18
Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment
Affected: 21.3R1-EVO before 21.3*; 21.4 before 21.4R3-EVO; 22.1 before 22.1R1-S2-EVO, 22.1R3-EVO; 22.2 before 22.2R2-EVO
CVE-2022-22208
5.9
1%
Oct 18
Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions
Affected: before 20.4R3-S4-EVO; 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2025-60011
5.8
0%
Jan 15
Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO
CVE-2026-57025
5.5
0%
Jul 9
Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash
Affected: before 23.2R2-S7-EVO; 23.4 before 23.4R2-S8-EVO; 24.2 before 24.2R2-EVO; 24.4 before 24.4R1-S3-EVO
CVE-2026-33776
5.5
0%
Apr 9
Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information
Affected: before 23.2R2-S6-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S1-EVO; 25.2 before 25.2R2-EVO
CVE-2025-59961
5.5
0%
Jan 15
Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO; 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO
CVE-2025-59959
5.5
0%
Jan 15
Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO
CVE-2025-52986
5.5
0%
Jul 11
Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks
Affected: before 22.2R3-S7-EVO; 22.4-EVO before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S4-EVO; 24.2-EVO before 24.2R2-EVO; 24.4-EVO before 24.4R2-EVO
CVE-2025-30655
5.5
0%
Apr 9
Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled
Affected: before 21.2R3-S9-EVO; 21.4-EVO before 21.4R3-S8-EVO; 22.2-EVO before 22.2R3-S6-EVO; 22.4-EVO before 22.4R3-S2-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-EVO
CVE-2025-30654
5.5
0%
Apr 9
Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information
Affected: before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S6-EVO; 22.4-EVO before 22.4R3-S5-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S3-EVO
CVE-2025-30652
5.5
0%
Apr 9
Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash
Affected: before 21.2R3-S9-EVO; 21.4-EVO before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S6-EVO; 22.4-EVO before 22.4R3-S6-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S4-EVO; +1 more
CVE-2022-22240
5.5
0%
Oct 18
Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario
Affected: before 20.4R3-S1-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R1-S2-EVO, 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2022-22233
5.5
0%
Oct 18
Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash
Affected: 21.4-EVO before 21.4R1-S2-EVO, 21.4R2-S1-EVO, 21.4R3-EVO; 22.1-EVO before 22.1R2-EVO
CVE-2026-101968
5.4
0%
Oct 14
Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2025-60010
5.4
0%
Oct 9
Junos OS and Junos OS Evolved: Device allows login for user with expired password
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S4-EVO; 23.4 before 23.4R2-S5-EVO; 24.2 before 24.2R2-S1-EVO; 24.4 before 24.4R1-S3-EVO, 24.4R2-EVO
CVE-2026-102053
5.3
0%
Oct 14
Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-57029
5.3
0%
Jul 9
Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
Affected: before 23.4R2-S7-EVO; 24.2 before 24.2R2-S5-EVO; 24.4 before 24.4R2-S3-EVO; 25.2 before 25.2R2-EVO
CVE-2025-60006
5.3
1%
Oct 9
Junos OS Evolved: OS command injection vulnerabilities fixed
Affected: 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO
CVE-2025-59962
5.3
0%
Oct 9
Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash
Affected: 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4R3-EVO; 23.2 before 23.2R2-EVO
CVE-2025-52985
5.3
0%
Jul 11
Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching
Affected: 23.2R2-S3-EVO before 23.2R2-S4-EVO; 23.4R2-S3-EVO before 23.4R2-S5-EVO; 24.2R2-EVO before 24.2R2-S1-EVO; 24.4-EVO before 24.4R1-S3-EVO, 24.4R2-EVO
CVE-2025-52958
5.3
0%
Jul 11
Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash
Affected: before 22.2R3-S6-EVO; 22.4 before 22.4R3-S6-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S4-EVO; 24.2 before 24.2R2-EVO
CVE-2025-21597
5.3
0%
Apr 9
Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed
Affected: before 21.2R3-S6-EVO; 21.3-EVO before 21.3R3-S5-EVO; 21.4-EVO before 21.4R3-S4-EVO; 22.1-EVO before 22.1R3-S3-EVO; 22.2-EVO before 22.2R3-S1-EVO; 22.3-EVO before 22.3R3-EVO; +1 more
CVE-2022-22227
5.3
1%
Oct 18
Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization
Affected: 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-S2-EVO; 21.3-EVO before 21.3R3-EVO; 21.4-EVO before 21.4R1-S1-EVO, 21.4R2-EVO
CVE-2025-52989
5.1
0%
Jul 11
Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration
Affected: before 22.4R3-S7-EVO; 23.2-EVO before 23.2R2-S4-EVO; 23.4-EVO before 23.4R2-S5-EVO; 24.2-EVO before 24.2R2-S1-EVO; 24.4-EVO before 24.4R2-EVO
CVE-2026-102013
4.4
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101934
4.4
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-21901
4.4
0%
Jul 9
Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash
Affected: 23.2 before 23.2R2-S7-EVO; 23.4 before 23.4R2-S8-EVO
CVE-2026-102054
4.3
0%
Oct 14
Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101995
4.3
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-33799
4.3
0%
Jul 9
Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
Affected: before 21.2R3-S8-EVO; 21.4 before 21.4R3-S7-EVO; 22.1 before 22.1*; 22.2 before 22.2R3-S4-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4*; +2 more
CVE-2026-101946
3.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101991
3.1
0%
Oct 14
Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
Page 4 of 4 · 198 total
1…34