Juniper security advisories, January 2026

Juniper advisories published in January 2026

1. Jan 27, 2026
   Critical [CVE-2025-21589] Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may

   Critical9.8

2. Jan 15, 2026
   High [CVE-2026-21920] Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series

   High7.5

3. Jan 15, 2026
   High [CVE-2026-21918] Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series

   High7.5

4. Jan 15, 2026
   High [CVE-2026-21917] Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS…

   High7.5

5. Jan 15, 2026
   High [CVE-2026-21914] Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series

   High7.5

6. Jan 15, 2026
   High [CVE-2026-21913] Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on…

   High7.5

7. Jan 15, 2026
   High [CVE-2026-21908] Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and…

   High7.1

8. Jan 15, 2026
   High [CVE-2026-21906] Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS…

   High7.5

9. Jan 15, 2026
   High [CVE-2026-21905] Junos: Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper…

   High7.5

10. Jan 15, 2026
    High [CVE-2025-60003] Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved

    High7.5

11. Jan 15, 2026
    High [CVE-2025-59960] Junos: Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks…

    High7.4

12. Jan 15, 2026
    Medium [CVE-2026-21921] Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved

    Medium6.5

13. Jan 15, 2026
    Medium [CVE-2026-21912] Junos: Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of…

    Medium5.5

14. Jan 15, 2026
    Medium [CVE-2026-21911] Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved

    Medium6.5

15. Jan 15, 2026
    Medium [CVE-2026-21910] Junos: Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks…

    Medium6.5

16. Jan 15, 2026
    Medium [CVE-2026-21909] Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos…

    Medium6.5

17. Jan 15, 2026
    Medium [CVE-2026-21907] Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space

    Medium5.9

18. Jan 15, 2026
    Medium [CVE-2026-21903] Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS

    Medium6.5

19. Jan 15, 2026
    Medium [CVE-2026-0203] Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS

    Medium6.5

20. Jan 15, 2026
    Medium [CVE-2025-60011] Junos: Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks…

    Medium5.8

21. Jan 15, 2026
    Medium [CVE-2025-60007] NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series

    Medium5.5

22. Jan 15, 2026
    Medium [CVE-2025-59961] Junos: Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks…

    Medium5.5

23. Jan 15, 2026
    Medium [CVE-2025-59959] Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…

    Medium5.5

24. Jan 15, 2026
    Medium [CVE-2025-52987] clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights)

    Medium6.1