CVEs published in October 2026

CVE-2026-102062High

Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server

CVE-2026-102078Medium

Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)

CVE-2026-102079High

OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device

CVE-2026-102080Medium

Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service (DoS)

CVE-2026-102081High

Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS)

CVE-2026-102082Medium

Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS)

CVE-2026-102083Medium

Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)

CVE-2026-102084High

Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device

CVE-2026-102085Medium

CVE-2026-102086Medium

NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS)

CVE-2026-102087Medium

Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS)

CVE-2026-103993Medium

Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities to cause a Denial-of-Service (DoS) as rpd crashes when graceful-shutdown sender community is added when attempting to advertise

CVE-2026-101991Low

Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled

CVE-2026-101986Critical

Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution

CVE-2026-101951High

Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised

CVE-2026-101957High

Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used

CVE-2026-102065High

Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled

CVE-2026-101974Medium

Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used

CVE-2026-102067Medium

Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a crafted RSVP packet when L2 LSP support is enabled

CVE-2026-101995Medium

Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption

CVE-2026-101948High

Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used

CVE-2026-101977High

Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used

CVE-2026-101956Critical

Junos OS: Unauthorized root command execution when J-Web is enabled

CVE-2026-101980Critical

Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled

CVE-2026-102069High

Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via

CVE-2026-102070High

Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet

CVE-2026-101973High

Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used

CVE-2026-102072Medium

Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request

CVE-2026-103994High

Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution

CVE-2026-102063Medium

Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF

CVE-2026-101965High

Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled

CVE-2026-101967High

Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used

CVE-2026-102068High

Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP

CVE-2026-101960Medium

Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled

CVE-2026-101978High

Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used

CVE-2026-101985Medium

Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled

CVE-2026-101966High

Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service

CVE-2026-93386High

CVE-2026-93385High

CVE-2026-93384High

CVE-2026-93383High

CVE-2026-93382High

CVE-2026-93381High

CVE-2026-93379High

CVE-2026-93376High

CVE-2026-93375High

CVE-2026-93374High

CVE-2026-93372High

CVE-2026-91742High

CVE-2026-91737High

CVE-2026-87658High

CVE-2026-87656High

CVE-2026-87655High

CVE-2026-87653High

CVE-2026-87652High

CVE-2026-87651High

CVE-2026-87650High

CVE-2026-87649High

CVE-2026-87647High

CVE-2026-87646High

CVE-2026-87644High

CVE-2026-87643High

CVE-2026-87642High

CVE-2026-87641High

CVE-2026-87640High

CVE-2026-87639High

CVE-2026-87638High

CVE-2026-87634High

CVE-2026-87633High

CVE-2026-87632High

CVE-2026-87631High

CVE-2026-87630High

CVE-2026-87629High

CVE-2026-87628High

CVE-2026-87627High

CVE-2026-87625High

CVE-2026-87624High

CVE-2026-87623High

CVE-2026-87622High

CVE-2026-87620High

CVE-2026-87618High

CVE-2026-87617High

CVE-2026-87615High

CVE-2026-87614High

CVE-2026-87613High

CVE-2026-87611High

CVE-2026-87610High

CVE-2026-87609High

CVE-2026-87608High

CVE-2026-87607High

CVE-2026-87606High

CVE-2026-87605High

CVE-2026-87603High

CVE-2026-87601High

CVE-2026-87600High

CVE-2026-87599High

CVE-2026-87597High

CVE-2026-87595High

CVE-2026-87594High

CVE-2026-87593High