# Juniper Networks Junos OS Evolved.

Every CVE that names Juniper Networks Junos OS Evolved among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service](https://agentprime.io/advisories/CVE-2026-101966.md)
  `CVE-2026-101966` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash](https://agentprime.io/advisories/CVE-2026-57029.md)
  `CVE-2026-57029` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.0 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-820
- [Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker](https://agentprime.io/advisories/CVE-2026-57028.md)
  `CVE-2026-57028` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-923
- [Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash](https://agentprime.io/advisories/CVE-2026-57025.md)
  `CVE-2026-57025` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-466
- [Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker](https://agentprime.io/advisories/CVE-2026-33803.md)
  `CVE-2026-33803` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-923
- [Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes](https://agentprime.io/advisories/CVE-2026-33801.md)
  `CVE-2026-33801` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash](https://agentprime.io/advisories/CVE-2026-33799.md)
  `CVE-2026-33799` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption
- [Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash](https://agentprime.io/advisories/CVE-2026-33794.md)
  `CVE-2026-33794` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash](https://agentprime.io/advisories/CVE-2026-21901.md)
  `CVE-2026-21901` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root](https://agentprime.io/advisories/CVE-2026-33791.md)
  `CVE-2026-33791` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.4 High · Not analysed yet · Published 9 Apr 2026 · Tags: Command injection
- [Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes](https://agentprime.io/advisories/CVE-2026-33783.md)
  `CVE-2026-33783` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-686
- [Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information](https://agentprime.io/advisories/CVE-2026-33776.md)
  `CVE-2026-33776` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Broken access control
- [Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset](https://agentprime.io/advisories/CVE-2026-33797.md)
  `CVE-2026-33797` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-20
- [Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald](https://agentprime.io/advisories/CVE-2026-33780.md)
  `CVE-2026-33780` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: Denial of service
- [Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs](https://agentprime.io/advisories/CVE-2026-33788.md)
  `CVE-2026-33788` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: Authentication bypass
- [Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability](https://agentprime.io/advisories/CVE-2026-21919.md)
  `CVE-2026-21919` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-821
- [Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart](https://agentprime.io/advisories/CVE-2025-59969.md)
  `CVE-2025-59969` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system](https://agentprime.io/advisories/CVE-2026-33793.md)
  `CVE-2026-33793` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: Privilege escalation
- [Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root](https://agentprime.io/advisories/CVE-2026-21902.md)
  `CVE-2026-21902` · CVE record: Juniper Networks Junos OS Evolved · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.18 · Not analysed yet · Published 25 Feb 2026 · Tags: Broken access control
- [Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash](https://agentprime.io/advisories/CVE-2026-21921.md)
  `CVE-2026-21921` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption
- [Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop](https://agentprime.io/advisories/CVE-2026-21911.md)
  `CVE-2026-21911` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-682
- [Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash](https://agentprime.io/advisories/CVE-2026-21909.md)
  `CVE-2026-21909` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process](https://agentprime.io/advisories/CVE-2026-21908.md)
  `CVE-2026-21908` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap](https://agentprime.io/advisories/CVE-2025-60011.md)
  `CVE-2025-60011` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash](https://agentprime.io/advisories/CVE-2025-60003.md)
  `CVE-2025-60003` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-126
- [Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable](https://agentprime.io/advisories/CVE-2025-59961.md)
  `CVE-2025-59961` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Broken access control
- [Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server](https://agentprime.io/advisories/CVE-2025-59960.md)
  `CVE-2025-59960` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash](https://agentprime.io/advisories/CVE-2025-59959.md)
  `CVE-2025-59959` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Device allows login for user with expired password](https://agentprime.io/advisories/CVE-2025-60010.md)
  `CVE-2025-60010` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-262
- [Junos OS Evolved: OS command injection vulnerabilities fixed](https://agentprime.io/advisories/CVE-2025-60006.md)
  `CVE-2025-60006` · CVE record: Juniper Networks Junos OS Evolved · CVSS 4.8 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Command injection
- [Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash](https://agentprime.io/advisories/CVE-2025-60004.md)
  `CVE-2025-60004` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-754
- [Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and r…](https://agentprime.io/advisories/CVE-2025-59967.md)
  `CVE-2025-59967` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash](https://agentprime.io/advisories/CVE-2025-59962.md)
  `CVE-2025-59962` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption
- [Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE](https://agentprime.io/advisories/CVE-2025-59958.md)
  `CVE-2025-59958` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-754
- [Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart](https://agentprime.io/advisories/CVE-2025-52961.md)
  `CVE-2025-52961` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 9 Oct 2025 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'](https://agentprime.io/advisories/CVE-2025-52988.md)
  `CVE-2025-52988` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.4 High · Not analysed yet · Published 11 Jul 2025 · Tags: Command injection
- [Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration](https://agentprime.io/advisories/CVE-2025-52989.md)
  `CVE-2025-52989` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-140
- [Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks](https://agentprime.io/advisories/CVE-2025-52986.md)
  `CVE-2025-52986` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service
- [Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching](https://agentprime.io/advisories/CVE-2025-52985.md)
  `CVE-2025-52985` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-480
- [Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes](https://agentprime.io/advisories/CVE-2025-52984.md)
  `CVE-2025-52984` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured](https://agentprime.io/advisories/CVE-2025-52964.md)
  `CVE-2025-52964` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset](https://agentprime.io/advisories/CVE-2025-52953.md)
  `CVE-2025-52953` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-440
- [Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash](https://agentprime.io/advisories/CVE-2025-52958.md)
  `CVE-2025-52958` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart](https://agentprime.io/advisories/CVE-2025-52955.md)
  `CVE-2025-52955` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption
- [Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system](https://agentprime.io/advisories/CVE-2025-52954.md)
  `CVE-2025-52954` · CVE record: Juniper Networks Junos OS Evolved · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2025 · Tags: Broken access control
- [Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2025-52949.md)
  `CVE-2025-52949` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash](https://agentprime.io/advisories/CVE-2025-52946.md)
  `CVE-2025-52946` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled](https://agentprime.io/advisories/CVE-2025-30655.md)
  `CVE-2025-30655` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information](https://agentprime.io/advisories/CVE-2025-30654.md)
  `CVE-2025-30654` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: Information disclosure
- [Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash](https://agentprime.io/advisories/CVE-2025-30653.md)
  `CVE-2025-30653` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash](https://agentprime.io/advisories/CVE-2025-30652.md)
  `CVE-2025-30652` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-755
- [Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash](https://agentprime.io/advisories/CVE-2025-30651.md)
  `CVE-2025-30651` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash](https://agentprime.io/advisories/CVE-2025-30648.md)
  `CVE-2025-30648` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-20
- [Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash](https://agentprime.io/advisories/CVE-2025-30646.md)
  `CVE-2025-30646` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-195
- [Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed](https://agentprime.io/advisories/CVE-2025-21597.md)
  `CVE-2025-21597` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash](https://agentprime.io/advisories/CVE-2025-21595.md)
  `CVE-2025-21595` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash](https://agentprime.io/advisories/CVE-2024-39564.md)
  `CVE-2024-39564` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 5 Feb 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash](https://agentprime.io/advisories/CVE-2025-21598.md)
  `CVE-2025-21598` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2025-21600.md)
  `CVE-2025-21600` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash](https://agentprime.io/advisories/CVE-2025-21602.md)
  `CVE-2025-21602` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jan 2025 · Tags: CWE-755

Newest: <https://agentprime.io/advisories/technology/juniper-networks-junos-os-evolved.md>
Older: <https://agentprime.io/advisories/technology/juniper-networks-junos-os-evolved.md?cursor=WyIyMDI1LTAxLTA5VDE2OjQ5OjI1LjM4NzAwMFoiLCJDVkUtMjAyNS0yMTYwMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os-evolved&cursor=WyIyMDI2LTEwLTE0VDE2OjEzOjQyLjQ1MTAwMFoiLCJDVkUtMjAyNi0xMDE5ODUiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os-evolved/?cursor=WyIyMDI2LTEwLTE0VDE2OjEzOjQyLjQ1MTAwMFoiLCJDVkUtMjAyNi0xMDE5ODUiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.
