# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes](https://agentprime.io/advisories/CVE-2026-21918.md) `CVE-2026-21918` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption - [Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash](https://agentprime.io/advisories/CVE-2026-21917.md) `CVE-2026-21917` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-1286 - [Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash](https://agentprime.io/advisories/CVE-2026-21914.md) `CVE-2026-21914` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-667 - [Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart](https://agentprime.io/advisories/CVE-2026-21913.md) `CVE-2026-21913` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-1419 - [Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset](https://agentprime.io/advisories/CVE-2026-21912.md) `CVE-2026-21912` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Race condition - [Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop](https://agentprime.io/advisories/CVE-2026-21910.md) `CVE-2026-21910` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash](https://agentprime.io/advisories/CVE-2026-21909.md) `CVE-2026-21909` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process](https://agentprime.io/advisories/CVE-2026-21908.md) `CVE-2026-21908` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.5 High · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption - [Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash](https://agentprime.io/advisories/CVE-2026-21906.md) `CVE-2026-21906` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-755 - [Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash](https://agentprime.io/advisories/CVE-2026-21905.md) `CVE-2026-21905` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: Denial of service - [Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash](https://agentprime.io/advisories/CVE-2026-21903.md) `CVE-2026-21903` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption - [Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart](https://agentprime.io/advisories/CVE-2026-0203.md) `CVE-2026-0203` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap](https://agentprime.io/advisories/CVE-2025-60011.md) `CVE-2025-60011` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash](https://agentprime.io/advisories/CVE-2025-60007.md) `CVE-2025-60007` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash](https://agentprime.io/advisories/CVE-2025-60003.md) `CVE-2025-60003` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-126 - [Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable](https://agentprime.io/advisories/CVE-2025-59961.md) `CVE-2025-59961` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Broken access control - [Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server](https://agentprime.io/advisories/CVE-2025-59960.md) `CVE-2025-59960` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash](https://agentprime.io/advisories/CVE-2025-59959.md) `CVE-2025-59959` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Device allows login for user with expired password](https://agentprime.io/advisories/CVE-2025-60010.md) `CVE-2025-60010` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-262 - [Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash](https://agentprime.io/advisories/CVE-2025-60004.md) `CVE-2025-60004` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-754 - [Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed](https://agentprime.io/advisories/CVE-2025-59980.md) `CVE-2025-59980` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-305 - [Junos Space Security Director: Insufficient authorization for sensitive resources in web interface](https://agentprime.io/advisories/CVE-2025-59968.md) `CVE-2025-59968` · CVE record: Juniper Networks Junos Space Security Director and 1 more · CVSS 7.7 High · Not analysed yet · Published 9 Oct 2025 - [Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart](https://agentprime.io/advisories/CVE-2025-59964.md) `CVE-2025-59964` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash](https://agentprime.io/advisories/CVE-2025-59962.md) `CVE-2025-59962` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption - [Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor](https://agentprime.io/advisories/CVE-2025-59957.md) `CVE-2025-59957` · CVE record: Juniper Networks Junos OS · CVSS 7.0 High · Not analysed yet · Published 9 Oct 2025 · Tags: CWE-346 - [Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash](https://agentprime.io/advisories/CVE-2025-52960.md) `CVE-2025-52960` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 9 Oct 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'](https://agentprime.io/advisories/CVE-2025-52988.md) `CVE-2025-52988` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.4 High · Not analysed yet · Published 11 Jul 2025 · Tags: Command injection - [Junos OS: SRX Series: J-Web can be exposed on additional interfaces](https://agentprime.io/advisories/CVE-2025-6549.md) `CVE-2025-6549` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Broken access control - [Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration](https://agentprime.io/advisories/CVE-2025-52989.md) `CVE-2025-52989` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-140 - [Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks](https://agentprime.io/advisories/CVE-2025-52986.md) `CVE-2025-52986` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service - [Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes](https://agentprime.io/advisories/CVE-2025-52984.md) `CVE-2025-52984` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.2 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption - [Junos OS: After removing ssh public key authentication root can still log in](https://agentprime.io/advisories/CVE-2025-52983.md) `CVE-2025-52983` · CVE record: Juniper Networks Junos OS · CVSS 8.6 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-446 - [Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash](https://agentprime.io/advisories/CVE-2025-52982.md) `CVE-2025-52982` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service - [Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash](https://agentprime.io/advisories/CVE-2025-52981.md) `CVE-2025-52981` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-754 - [Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message](https://agentprime.io/advisories/CVE-2025-52980.md) `CVE-2025-52980` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-198 - [Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured](https://agentprime.io/advisories/CVE-2025-52964.md) `CVE-2025-52964` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service - [Junos OS: A low-privileged user can disable an interface](https://agentprime.io/advisories/CVE-2025-52963.md) `CVE-2025-52963` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Broken access control - [Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset](https://agentprime.io/advisories/CVE-2025-52953.md) `CVE-2025-52953` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-440 - [Junos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash](https://agentprime.io/advisories/CVE-2025-52952.md) `CVE-2025-52952` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash](https://agentprime.io/advisories/CVE-2025-52958.md) `CVE-2025-52958` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: Denial of service - [Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart](https://agentprime.io/advisories/CVE-2025-52955.md) `CVE-2025-52955` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption - [Junos OS: IPv6 firewall filter fails to match payload-protocol](https://agentprime.io/advisories/CVE-2025-52951.md) `CVE-2025-52951` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-693 - [Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash](https://agentprime.io/advisories/CVE-2025-52949.md) `CVE-2025-52949` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-130 - [Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled](https://agentprime.io/advisories/CVE-2025-52948.md) `CVE-2025-52948` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-755 - [Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash](https://agentprime.io/advisories/CVE-2025-52947.md) `CVE-2025-52947` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash](https://agentprime.io/advisories/CVE-2025-52946.md) `CVE-2025-52946` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 11 Jul 2025 · Tags: Memory corruption - [Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation](https://agentprime.io/advisories/CVE-2025-30661.md) `CVE-2025-30661` · CVE record: Juniper Networks Junos OS · CVSS 8.5 High · Not analysed yet · Published 11 Jul 2025 · Tags: Broken access control - [Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset](https://agentprime.io/advisories/CVE-2025-30660.md) `CVE-2025-30660` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic](https://agentprime.io/advisories/CVE-2025-30659.md) `CVE-2025-30659` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-130 - [Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop](https://agentprime.io/advisories/CVE-2025-30658.md) `CVE-2025-30658` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: Denial of service - [Junos OS: Processing of a specific BGP update causes the SRRD process to crash](https://agentprime.io/advisories/CVE-2025-30657.md) `CVE-2025-30657` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-116 - [Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash](https://agentprime.io/advisories/CVE-2025-30656.md) `CVE-2025-30656` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-167 - [Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled](https://agentprime.io/advisories/CVE-2025-30655.md) `CVE-2025-30655` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information](https://agentprime.io/advisories/CVE-2025-30654.md) `CVE-2025-30654` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: Information disclosure - [Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crash](https://agentprime.io/advisories/CVE-2025-30653.md) `CVE-2025-30653` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash](https://agentprime.io/advisories/CVE-2025-30652.md) `CVE-2025-30652` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-755 - [Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash](https://agentprime.io/advisories/CVE-2025-30651.md) `CVE-2025-30651` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: Memory corruption - [Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.](https://agentprime.io/advisories/CVE-2025-30649.md) `CVE-2025-30649` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-20 - [Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash](https://agentprime.io/advisories/CVE-2025-30648.md) `CVE-2025-30648` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-20 - [Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak](https://agentprime.io/advisories/CVE-2025-30647.md) `CVE-2025-30647` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2025 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .