# Juniper Networks Junos OS. Every CVE that names Juniper Networks Junos OS among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash](https://agentprime.io/advisories/CVE-2026-102086.md) `CVE-2026-102086` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes](https://agentprime.io/advisories/CVE-2026-102087.md) `CVE-2026-102087` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-184 - [Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes](https://agentprime.io/advisories/CVE-2026-103993.md) `CVE-2026-103993` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled](https://agentprime.io/advisories/CVE-2026-101991.md) `CVE-2026-101991` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-130 - [Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution](https://agentprime.io/advisories/CVE-2026-101986.md) `CVE-2026-101986` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised](https://agentprime.io/advisories/CVE-2026-101951.md) `CVE-2026-101951` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1288 - [Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used](https://agentprime.io/advisories/CVE-2026-101957.md) `CVE-2026-101957` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-665 - [Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled](https://agentprime.io/advisories/CVE-2026-102065.md) `CVE-2026-102065` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284 - [Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used](https://agentprime.io/advisories/CVE-2026-101974.md) `CVE-2026-101974` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284 - [Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used](https://agentprime.io/advisories/CVE-2026-102067.md) `CVE-2026-102067` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284 - [Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption](https://agentprime.io/advisories/CVE-2026-101995.md) `CVE-2026-101995` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-1284 - [Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used](https://agentprime.io/advisories/CVE-2026-101948.md) `CVE-2026-101948` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used](https://agentprime.io/advisories/CVE-2026-101977.md) `CVE-2026-101977` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS: Unauthorized root command execution when J-Web is enabled](https://agentprime.io/advisories/CVE-2026-101956.md) `CVE-2026-101956` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass - [Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled](https://agentprime.io/advisories/CVE-2026-101980.md) `CVE-2026-101980` · CVE record: Juniper Networks Junos OS · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled](https://agentprime.io/advisories/CVE-2026-102069.md) `CVE-2026-102069` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used](https://agentprime.io/advisories/CVE-2026-102070.md) `CVE-2026-102070` · CVE record: Juniper Networks Junos OS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used](https://agentprime.io/advisories/CVE-2026-101973.md) `CVE-2026-101973` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled](https://agentprime.io/advisories/CVE-2026-102072.md) `CVE-2026-102072` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: CWE-409 - [Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution](https://agentprime.io/advisories/CVE-2026-103994.md) `CVE-2026-103994` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used](https://agentprime.io/advisories/CVE-2026-102063.md) `CVE-2026-102063` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 14 Oct 2026 · Tags: Denial of service - [Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs](https://agentprime.io/advisories/CVE-2026-57054.md) `CVE-2026-57054` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-706 - [Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash](https://agentprime.io/advisories/CVE-2026-57032.md) `CVE-2026-57032` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-236 - [Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect](https://agentprime.io/advisories/CVE-2026-57031.md) `CVE-2026-57031` · CVE record: Juniper Networks Junos OS · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754 - [Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS](https://agentprime.io/advisories/CVE-2026-57030.md) `CVE-2026-57030` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: Race condition - [Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash](https://agentprime.io/advisories/CVE-2026-57027.md) `CVE-2026-57027` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: Denial of service - [Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash](https://agentprime.io/advisories/CVE-2026-57026.md) `CVE-2026-57026` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-1286 - [Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash](https://agentprime.io/advisories/CVE-2026-57025.md) `CVE-2026-57025` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-466 - [Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously](https://agentprime.io/advisories/CVE-2026-57024.md) `CVE-2026-57024` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-694 - [Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash](https://agentprime.io/advisories/CVE-2026-57023.md) `CVE-2026-57023` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-1284 - [Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE](https://agentprime.io/advisories/CVE-2026-57022.md) `CVE-2026-57022` · CVE record: Juniper Networks Junos OS · CVSS 8.2 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754 - [Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash](https://agentprime.io/advisories/CVE-2026-57021.md) `CVE-2026-57021` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood](https://agentprime.io/advisories/CVE-2026-57020.md) `CVE-2026-57020` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754 - [Junos OS: MX Series: Specific traffic causes an FPC to reset](https://agentprime.io/advisories/CVE-2026-57019.md) `CVE-2026-57019` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-1284 - [Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command](https://agentprime.io/advisories/CVE-2026-33802.md) `CVE-2026-33802` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Broken access control - [Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes](https://agentprime.io/advisories/CVE-2026-33801.md) `CVE-2026-33801` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-754 - [Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash](https://agentprime.io/advisories/CVE-2026-33800.md) `CVE-2026-33800` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Jul 2026 · Tags: CWE-606 - [Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash](https://agentprime.io/advisories/CVE-2026-33799.md) `CVE-2026-33799` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash](https://agentprime.io/advisories/CVE-2026-21901.md) `CVE-2026-21901` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.7 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Memory corruption - [Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root](https://agentprime.io/advisories/CVE-2026-33791.md) `CVE-2026-33791` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.4 High · Not analysed yet · Published 9 Apr 2026 · Tags: Command injection - [Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.](https://agentprime.io/advisories/CVE-2026-33790.md) `CVE-2026-33790` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-754 - [Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes](https://agentprime.io/advisories/CVE-2026-33787.md) `CVE-2026-33787` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-754 - [Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario](https://agentprime.io/advisories/CVE-2026-33785.md) `CVE-2026-33785` · CVE record: Juniper Networks Junos OS · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Broken access control - [Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed](https://agentprime.io/advisories/CVE-2026-33781.md) `CVE-2026-33781` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-754 - [Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes](https://agentprime.io/advisories/CVE-2026-33778.md) `CVE-2026-33778` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-1286 - [Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information](https://agentprime.io/advisories/CVE-2026-33776.md) `CVE-2026-33776` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Broken access control - [Junos OS: MX Series: Firewall filters on lo0.\ in the default routing instance are not in effect](https://agentprime.io/advisories/CVE-2026-33774.md) `CVE-2026-33774` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-754 - [Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset](https://agentprime.io/advisories/CVE-2026-33797.md) `CVE-2026-33797` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-20 - [Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication](https://agentprime.io/advisories/CVE-2026-33779.md) `CVE-2026-33779` · CVE record: Juniper Networks Junos OS · CVSS 8.3 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-296 - [Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd](https://agentprime.io/advisories/CVE-2026-33775.md) `CVE-2026-33775` · CVE record: Juniper Networks Junos OS · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: Denial of service - [Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts](https://agentprime.io/advisories/CVE-2026-33782.md) `CVE-2026-33782` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 9 Apr 2026 · Tags: Denial of service - [Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald](https://agentprime.io/advisories/CVE-2026-33780.md) `CVE-2026-33780` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: Denial of service - [Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied](https://agentprime.io/advisories/CVE-2026-33773.md) `CVE-2026-33773` · CVE record: Juniper Networks Junos OS · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-1419 - [Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes](https://agentprime.io/advisories/CVE-2026-33786.md) `CVE-2026-33786` · CVE record: Juniper Networks Junos OS · CVSS 6.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-754 - [Junos OS: A low privileged user can escalate their privileges so that they can login as root](https://agentprime.io/advisories/CVE-2026-21916.md) `CVE-2026-21916` · CVE record: Juniper Networks Junos OS · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-61 - [Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability](https://agentprime.io/advisories/CVE-2026-21919.md) `CVE-2026-21919` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-821 - [Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system](https://agentprime.io/advisories/CVE-2026-33793.md) `CVE-2026-33793` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 8.5 High · Not analysed yet · Published 9 Apr 2026 · Tags: Privilege escalation - [Junos OS: Privileged local user can gain access to a Linux-based FPC as root](https://agentprime.io/advisories/CVE-2025-30650.md) `CVE-2025-30650` · CVE record: Juniper Networks Junos OS · CVSS 8.4 High · Not analysed yet · Published 8 Apr 2026 · Tags: Authentication bypass - [Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash](https://agentprime.io/advisories/CVE-2026-21921.md) `CVE-2026-21921` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 7.1 High · Not analysed yet · Published 15 Jan 2026 · Tags: Memory corruption - [Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash](https://agentprime.io/advisories/CVE-2026-21920.md) `CVE-2026-21920` · CVE record: Juniper Networks Junos OS · CVSS 8.7 High · Not analysed yet · Published 15 Jan 2026 · Tags: CWE-252 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .