JN
Vendor
Juniper Networks
14 products with CVEs on record
298
CVEs
0
On KEV
147
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-106079
New
SS
Session Smart Router
Juniper Networks
8.8–Oct 28Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration
CVE-2026-103411
New
SS
Session Smart Router
Juniper Networks
7.1–Oct 28Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing
CVE-2026-103410
New
SS
Session Smart Router
Juniper Networks
7.5–Oct 28Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection
CVE-2026-103409
New
SS
Session Smart Router
Juniper Networks
9.8–Oct 28Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed
CVE-2026-103408
New
SS
Session Smart Router
Juniper Networks
8.8–Oct 28Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options
CVE-2026-103407
New
SS
Session Smart Router
Juniper Networks
8.8–Oct 28Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management
CVE-2026-103406
New
SS
Session Smart Conductor
Juniper Networks
9.8–Oct 28Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.
CVE-2026-103405
New
SS
Session Smart Router
Juniper Networks
5.8–Oct 28Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting
CVE-2026-103404
New
SS
Session Smart Conductor
Juniper Networks
6.8–Oct 28Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials
CVE-2026-103403
New
SS
Session Smart Router
Juniper Networks
8.8–Oct 28Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules
CVE-2026-103402
New
SS
Session Smart Router
Juniper Networks
8.8–Oct 28Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation
CVE-2026-103401
New
SS
Session Smart Router
Juniper Networks
8.8–Oct 28Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root
CVE-2026-103400
New
SS
Session Smart Conductor
Juniper Networks
5.5–Oct 28Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup
CVE-2026-103394
New
SS
Session Smart Router
Juniper Networks
3.7–Oct 28Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
CVE-2026-103393
New
SS
Session Smart Router
Juniper Networks
4.3–Oct 28Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing
CVE-2026-103392
New
SS
Session Smart Router
Juniper Networks
4.8–Oct 28Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled
CVE-2026-103391
New
SS
Session Smart Router
Juniper Networks
5.3–Oct 28Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature
CVE-2026-103390
New
SS
Session Smart Conductor
Juniper Networks
5.3–Oct 28Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification
CVE-2026-101954
JO
Junos OS Evolved
Juniper Networks
9.8
0%
Oct 14Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
CVE-2026-101952
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
CVE-2026-101949
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash
CVE-2026-101964
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
CVE-2026-101963
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used
CVE-2026-101962
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used
CVE-2026-101961
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy
CVE-2026-101959
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
CVE-2026-101983
JO
Junos OS Evolved
Juniper Networks
9.8
1%
Oct 14Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
CVE-2026-101982
JO
Junos OS Evolved
Juniper Networks
9.8
1%
Oct 14Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
CVE-2026-101981
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled
CVE-2026-101979
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled
CVE-2026-101976
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash
CVE-2026-101975
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used
CVE-2026-101972
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled
CVE-2026-33798
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled
CVE-2026-33796
JO
Junos OS Evolved
Juniper Networks
9.8
1%
Oct 14Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
CVE-2026-33795
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
CVE-2026-33789
JO
Junos OS Evolved
Juniper Networks
9.8
1%
Oct 14Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
CVE-2026-102185
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used
CVE-2026-102184
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash
CVE-2026-102183
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes
CVE-2026-102180
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
CVE-2026-102179
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used
CVE-2026-102178
JO
Junos OS Evolved
Juniper Networks
9.8
0%
Oct 14Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise
CVE-2026-102177
JO
Junos OS Evolved
Juniper Networks
7.6
0%
Oct 14Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used
CVE-2026-102175
JO
Junos OS Evolved
Juniper Networks
9.8
1%
Oct 14Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used
CVE-2026-102061
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
CVE-2026-102060
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
CVE-2026-102059
JO
Junos OS Evolved
Juniper Networks
8.8
4%
Oct 14Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information
CVE-2026-102058
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
CVE-2026-102056
JO
Junos OS Evolved
Juniper Networks
7.1
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
CVE-2026-102055
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
CVE-2026-102054
JO
Junos OS Evolved
Juniper Networks
4.3
0%
Oct 14Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
CVE-2026-102053
JO
Junos OS Evolved
Juniper Networks
5.3
0%
Oct 14Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
CVE-2026-102052
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
CVE-2026-102051
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
CVE-2026-102050
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
CVE-2026-102049
JO
Junos OS Evolved
Juniper Networks
8.8
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled
CVE-2026-102047
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
CVE-2026-102045
JO
Junos OS Evolved
Juniper Networks
6.5
0%
Oct 14Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
CVE-2026-102044
JO
Junos OS Evolved
Juniper Networks
7.5
0%
Oct 14Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled