# Juniper Networks Junos OS.

Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled](https://agentprime.io/advisories/CVE-2026-101954.md)
  `CVE-2026-101954` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass
- [Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled](https://agentprime.io/advisories/CVE-2026-101952.md)
  `CVE-2026-101952` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284
- [Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash](https://agentprime.io/advisories/CVE-2026-101949.md)
  `CVE-2026-101949` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message](https://agentprime.io/advisories/CVE-2026-101964.md)
  `CVE-2026-101964` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used](https://agentprime.io/advisories/CVE-2026-101963.md)
  `CVE-2026-101963` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-682
- [Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used](https://agentprime.io/advisories/CVE-2026-101962.md)
  `CVE-2026-101962` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy](https://agentprime.io/advisories/CVE-2026-101961.md)
  `CVE-2026-101961` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash](https://agentprime.io/advisories/CVE-2026-101959.md)
  `CVE-2026-101959` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-688
- [Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured](https://agentprime.io/advisories/CVE-2026-101983.md)
  `CVE-2026-101983` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used](https://agentprime.io/advisories/CVE-2026-101982.md)
  `CVE-2026-101982` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled](https://agentprime.io/advisories/CVE-2026-101981.md)
  `CVE-2026-101981` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled](https://agentprime.io/advisories/CVE-2026-101979.md)
  `CVE-2026-101979` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash](https://agentprime.io/advisories/CVE-2026-101976.md)
  `CVE-2026-101976` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used](https://agentprime.io/advisories/CVE-2026-101975.md)
  `CVE-2026-101975` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled](https://agentprime.io/advisories/CVE-2026-101972.md)
  `CVE-2026-101972` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops](https://agentprime.io/advisories/CVE-2026-102077.md)
  `CVE-2026-102077` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-754
- [Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled](https://agentprime.io/advisories/CVE-2026-33798.md)
  `CVE-2026-33798` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled](https://agentprime.io/advisories/CVE-2026-33796.md)
  `CVE-2026-33796` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised](https://agentprime.io/advisories/CVE-2026-33795.md)
  `CVE-2026-33795` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-197
- [Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured](https://agentprime.io/advisories/CVE-2026-33792.md)
  `CVE-2026-33792` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service](https://agentprime.io/advisories/CVE-2026-33789.md)
  `CVE-2026-33789` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used](https://agentprime.io/advisories/CVE-2026-102185.md)
  `CVE-2026-102185` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash](https://agentprime.io/advisories/CVE-2026-102184.md)
  `CVE-2026-102184` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284
- [Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes](https://agentprime.io/advisories/CVE-2026-102183.md)
  `CVE-2026-102183` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284
- [Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution](https://agentprime.io/advisories/CVE-2026-102182.md)
  `CVE-2026-102182` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use](https://agentprime.io/advisories/CVE-2026-102180.md)
  `CVE-2026-102180` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used](https://agentprime.io/advisories/CVE-2026-102179.md)
  `CVE-2026-102179` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise](https://agentprime.io/advisories/CVE-2026-102178.md)
  `CVE-2026-102178` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used](https://agentprime.io/advisories/CVE-2026-102177.md)
  `CVE-2026-102177` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled](https://agentprime.io/advisories/CVE-2026-102176.md)
  `CVE-2026-102176` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used](https://agentprime.io/advisories/CVE-2026-102175.md)
  `CVE-2026-102175` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled](https://agentprime.io/advisories/CVE-2026-102174.md)
  `CVE-2026-102174` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used](https://agentprime.io/advisories/CVE-2026-102061.md)
  `CVE-2026-102061` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used](https://agentprime.io/advisories/CVE-2026-102060.md)
  `CVE-2026-102060` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information](https://agentprime.io/advisories/CVE-2026-102059.md)
  `CVE-2026-102059` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Command injection
- [Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled](https://agentprime.io/advisories/CVE-2026-102058.md)
  `CVE-2026-102058` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS: An attacker causes DHCP service disruption during DHCP client operation](https://agentprime.io/advisories/CVE-2026-102057.md)
  `CVE-2026-102057` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled](https://agentprime.io/advisories/CVE-2026-102056.md)
  `CVE-2026-102056` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled](https://agentprime.io/advisories/CVE-2026-102055.md)
  `CVE-2026-102055` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured](https://agentprime.io/advisories/CVE-2026-102054.md)
  `CVE-2026-102054` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130
- [Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used](https://agentprime.io/advisories/CVE-2026-102053.md)
  `CVE-2026-102053` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used](https://agentprime.io/advisories/CVE-2026-102052.md)
  `CVE-2026-102052` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled](https://agentprime.io/advisories/CVE-2026-102051.md)
  `CVE-2026-102051` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled](https://agentprime.io/advisories/CVE-2026-102050.md)
  `CVE-2026-102050` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled](https://agentprime.io/advisories/CVE-2026-102049.md)
  `CVE-2026-102049` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled](https://agentprime.io/advisories/CVE-2026-102048.md)
  `CVE-2026-102048` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used](https://agentprime.io/advisories/CVE-2026-102047.md)
  `CVE-2026-102047` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1288
- [Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used](https://agentprime.io/advisories/CVE-2026-102046.md)
  `CVE-2026-102046` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled](https://agentprime.io/advisories/CVE-2026-102044.md)
  `CVE-2026-102044` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled](https://agentprime.io/advisories/CVE-2026-102043.md)
  `CVE-2026-102043` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-197
- [Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled](https://agentprime.io/advisories/CVE-2026-102042.md)
  `CVE-2026-102042` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled](https://agentprime.io/advisories/CVE-2026-102041.md)
  `CVE-2026-102041` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used](https://agentprime.io/advisories/CVE-2026-102040.md)
  `CVE-2026-102040` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used](https://agentprime.io/advisories/CVE-2026-102039.md)
  `CVE-2026-102039` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used](https://agentprime.io/advisories/CVE-2026-102037.md)
  `CVE-2026-102037` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Other injection
- [Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service](https://agentprime.io/advisories/CVE-2026-102036.md)
  `CVE-2026-102036` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption
- [Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled](https://agentprime.io/advisories/CVE-2026-102035.md)
  `CVE-2026-102035` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled](https://agentprime.io/advisories/CVE-2026-102034.md)
  `CVE-2026-102034` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service
- [Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled](https://agentprime.io/advisories/CVE-2026-102033.md)
  `CVE-2026-102033` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284
- [Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present](https://agentprime.io/advisories/CVE-2026-102032.md)
  `CVE-2026-102032` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/juniper-networks-junos-os.md?cursor=WyIyMDI2LTEwLTE0VDE2OjUwOjA0LjEzNjAwMFoiLCJDVkUtMjAyNi0xMDIwMzIiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=juniper-networks-junos-os>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/juniper-networks-junos-os/>. Everything for agents: <https://agentprime.io/llms.txt>.