JN
Vendor
Juniper Networks
298
CVEs
0
On KEV
147
New 30D
Products
JO9.8
Junos OS Evolved
Juniper Networks
216 CVEs0 on KEV121 new
SS9.8
Session Smart Router
Juniper Networks
17 CVEs0 on KEV16 new
SS9.8
Session Smart Conductor
Juniper Networks
11 CVEs0 on KEV10 new
JS9.0
Junos Space
Juniper Networks
31 CVEs0 on KEV0 new
JA9.8
Juniper ATP
Juniper Networks
12 CVEs0 on KEV0 new
JL9.8
JSI LWC
Juniper Networks
2 CVEs0 on KEV0 new
JS8.6
Junos Space Security Director
Juniper Networks
2 CVEs0 on KEV0 new
AP8.1
Apstra
Juniper Networks
1 CVEs0 on KEV0 new
CO8.1
CTP OS
Juniper Networks
1 CVEs0 on KEV0 new
JS9.6
Juniper Security Director
Juniper Networks
1 CVEs0 on KEV0 new
PA8.4
Paragon Active Assurance (Formerly Netrounds)
Juniper Networks
1 CVEs0 on KEV0 new
PA6.1
Paragon Automation (Pathfinder, Planner, Insights)
Juniper Networks
1 CVEs0 on KEV0 new
SD7.4
Security Director Policy Enforcer
Juniper Networks
1 CVEs0 on KEV0 new
WA9.8
WAN Assurance Managed Router
Juniper Networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-106079 New | SS Session Smart Router Juniper Networks | 8.8 | Oct 28 | Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration |
| CVE-2026-103411 New | SS Session Smart Router Juniper Networks | 7.1 | Oct 28 | Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing |
| CVE-2026-103410 New | SS Session Smart Router Juniper Networks | 7.5 | Oct 28 | Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection |
| CVE-2026-103409 New | SS Session Smart Router Juniper Networks | 9.8 | Oct 28 | Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed |
| CVE-2026-103408 New | SS Session Smart Router Juniper Networks | 8.8 | Oct 28 | Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options |
| CVE-2026-103407 New | SS Session Smart Router Juniper Networks | 8.8 | Oct 28 | Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management |
| CVE-2026-103406 New | SS Session Smart Conductor Juniper Networks | 9.8 | Oct 28 | Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. |
| CVE-2026-103405 New | SS Session Smart Router Juniper Networks | 5.8 | Oct 28 | Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting |
| CVE-2026-103404 New | SS Session Smart Conductor Juniper Networks | 6.8 | Oct 28 | Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials |
| CVE-2026-103403 New | SS Session Smart Router Juniper Networks | 8.8 | Oct 28 | Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules |
| CVE-2026-103402 New | SS Session Smart Router Juniper Networks | 8.8 | Oct 28 | Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation |
| CVE-2026-103401 New | SS Session Smart Router Juniper Networks | 8.8 | Oct 28 | Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root |
| CVE-2026-103400 New | SS Session Smart Conductor Juniper Networks | 5.5 | Oct 28 | Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup |
| CVE-2026-103394 New | SS Session Smart Router Juniper Networks | 3.7 | Oct 28 | Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates. |
| CVE-2026-103393 New | SS Session Smart Router Juniper Networks | 4.3 | Oct 28 | Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing |
| CVE-2026-103392 New | SS Session Smart Router Juniper Networks | 4.8 | Oct 28 | Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled |
| CVE-2026-103391 New | SS Session Smart Router Juniper Networks | 5.3 | Oct 28 | Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature |
| CVE-2026-103390 New | SS Session Smart Conductor Juniper Networks | 5.3 | Oct 28 | Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification |
| CVE-2026-101954 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled |
| CVE-2026-101952 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled |
| CVE-2026-101949 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash |
| CVE-2026-101964 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message |
| CVE-2026-101963 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used |
| CVE-2026-101962 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used |
| CVE-2026-101961 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy |
| CVE-2026-101959 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash |
| CVE-2026-101983 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured |
| CVE-2026-101982 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used |
| CVE-2026-101981 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled |
| CVE-2026-101979 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled |
| CVE-2026-101976 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash |
| CVE-2026-101975 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used |
| CVE-2026-101972 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled |
| CVE-2026-33798 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled |
| CVE-2026-33796 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled |
| CVE-2026-33795 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised |
| CVE-2026-33789 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service |
| CVE-2026-102185 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used |
| CVE-2026-102184 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash |
| CVE-2026-102183 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes |
| CVE-2026-102180 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use |
| CVE-2026-102179 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used |
| CVE-2026-102178 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise |
| CVE-2026-102177 | JO Junos OS Evolved Juniper Networks | 7.6 | Oct 14 | Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used |
| CVE-2026-102175 | JO Junos OS Evolved Juniper Networks | 9.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used |
| CVE-2026-102061 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used |
| CVE-2026-102060 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used |
| CVE-2026-102059 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information |
| CVE-2026-102058 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled |
| CVE-2026-102056 | JO Junos OS Evolved Juniper Networks | 7.1 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled |
| CVE-2026-102055 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled |
| CVE-2026-102054 | JO Junos OS Evolved Juniper Networks | 4.3 | Oct 14 | Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured |
| CVE-2026-102053 | JO Junos OS Evolved Juniper Networks | 5.3 | Oct 14 | Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used |
| CVE-2026-102052 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used |
| CVE-2026-102051 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled |
| CVE-2026-102050 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled |
| CVE-2026-102049 | JO Junos OS Evolved Juniper Networks | 8.8 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled |
| CVE-2026-102047 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used |
| CVE-2026-102045 | JO Junos OS Evolved Juniper Networks | 6.5 | Oct 14 | Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled |
| CVE-2026-102044 | JO Junos OS Evolved Juniper Networks | 7.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled |
