Juniper security advisories, October 2026

Every Juniper Networks security advisory published in October 2026, from Juniper SIRT (JSA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 171
Critical: 17
High: 83
In CISA KEV: 0

Juniper advisories published in October 2026

Oct 28, 2026
Critical [CVE-2026-103409] Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtain administrative privileges by passing crafted URL parameters to an insecure endpoint running as root
Critical9.8
Oct 28, 2026
Critical [CVE-2026-103406] Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allows a remote attacker to execute arbitrary commands as root via a specially crafted salt minion ID
Critical9.8
Oct 28, 2026
High [CVE-2026-106079] Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with config-write privileges to achieve arbitrary command execution as root in the YANG configuration
High8.8
Oct 28, 2026
High [CVE-2026-103411] Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause information disclosure and a denial of service via a malicious DHCP reply
High7.1
Oct 28, 2026
High [CVE-2026-103410] Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a denial of service via a specially crafted TLS server certificate
High7.5
Oct 28, 2026
High [CVE-2026-103408] Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achieve remote code execution via a malicious DHCP reply
High8.8
Oct 28, 2026
High [CVE-2026-103407] Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the certificate and private-key REST API
High8.8
Oct 28, 2026
High [CVE-2026-103403] Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to perform arbitrary file deletion and arbitrary command execution via the deletion of an audit rule
High8.8
Oct 28, 2026
High [CVE-2026-103402] Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with write access to the model cache directory to execute arbitrary code and escalate privileges via the processing of unverified cache files
High8.8
Oct 28, 2026
High [CVE-2026-103401] Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints
High8.8
Oct 28, 2026
Medium [CVE-2026-103405] Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to inject arbitrary HTTP headers via unsanitized request body parameters
Medium5.8
Oct 28, 2026
Medium [CVE-2026-103404] Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to access sensitive routing credentials via triggering processes that write to the /tmp directory
Medium6.8
Oct 28, 2026
Medium [CVE-2026-103400] Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker with local access to unmount arbitrary filesystems or cause a denial of service via the creation of specially named directories and a service restart
Medium5.5
Oct 28, 2026
Medium [CVE-2026-103393] Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory contents or cause a system fault via a specially crafted VRRPv3 advertisement
Medium4.3
Oct 28, 2026
Medium [CVE-2026-103392] Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and potentially cause session desynchronization via a transit TCP packet with an oversized SACK option length
Medium4.8
Oct 28, 2026
Medium [CVE-2026-103391] Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded packet data and potentially cause a data-plane crash via a transit TCP packet with a crafted TCP option length
Medium5.3
Oct 28, 2026
Medium [CVE-2026-103390] Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to cause a denial of service via a specially crafted HTTP request
Medium5.3
Oct 28, 2026
Low [CVE-2026-103394] Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment
Low3.7
Oct 14, 2026
Critical [CVE-2026-101954] Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101983] Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101982] Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service
Critical9.8
Oct 14, 2026
Critical [CVE-2026-33796] Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring
Critical9.8
Oct 14, 2026
Critical [CVE-2026-33792] Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel
Critical9.8
Oct 14, 2026
Critical [CVE-2026-33789] Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled
Critical9.8
Oct 14, 2026
Critical [CVE-2026-102182] Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets
Critical9.8
Oct 14, 2026
Critical [CVE-2026-102178] Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled
Critical9.8
Oct 14, 2026
Critical [CVE-2026-102175] Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a crafted frame received over the service-deployment TCP connection
Critical9.8
Oct 14, 2026
Critical [CVE-2026-102031] Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101990] Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101950] Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101986] Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101956] Junos OS: Unauthorized root command execution when J-Web is enabled
Critical9.8
Oct 14, 2026
Critical [CVE-2026-101980] Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled
Critical9.8
Oct 14, 2026
High [CVE-2026-101952] Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or NSR
High7.5
Oct 14, 2026
High [CVE-2026-101949] NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of service via a VPN-flowspec BGP update if it is readvertised and BMP post-policy RIB-out monitoring is configured
High7.5
Oct 14, 2026
High [CVE-2026-101963] Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured
High7.5
Oct 14, 2026
High [CVE-2026-101962] Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempted to be readvertised to cause an rpd crash
High7.5
Oct 14, 2026
High [CVE-2026-101961] NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP import policy
High7.5
Oct 14, 2026
High [CVE-2026-101981] Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message
High8.8
Oct 14, 2026
High [CVE-2026-101979] Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when SNMP and AAA are enabled
High8.8
Oct 14, 2026
High [CVE-2026-101976] Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability sending a specifically malformed BGP update to cause a Denial-of-Service (DoS)
High7.5
Oct 14, 2026
High [CVE-2026-102077] Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)
High7.5
Oct 14, 2026
High [CVE-2026-33798] Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic
High8.8
Oct 14, 2026
High [CVE-2026-33795] Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised
High7.5
Oct 14, 2026
High [CVE-2026-102185] Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election
High7.5
Oct 14, 2026
High [CVE-2026-102184] Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 structure carried in an EVPN route update
High7.5
Oct 14, 2026
High [CVE-2026-102183] Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause an rpd crash via a specifically malformed NLRI
High7.5
Oct 14, 2026
High [CVE-2026-102180] Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP RIB streaming telemetry subscription is active
High7.5
Oct 14, 2026
High [CVE-2026-102179] Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed
High7.5
Oct 14, 2026
High [CVE-2026-102177] Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured
High7.6
Oct 14, 2026
High [CVE-2026-102176] Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service and a JDAF routing instance are enabled
High8.8
Oct 14, 2026
High [CVE-2026-102174] Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the remote-access VPN authentication and JIMS identity-publishing path
High8.8
Oct 14, 2026
High [CVE-2026-102061] Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message
High8.8
Oct 14, 2026
High [CVE-2026-102059] Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary commands with root privileges via a rogue DHCP server
High8.8
Oct 14, 2026
High [CVE-2026-102057] Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response
High7.5
Oct 14, 2026
High [CVE-2026-102056] Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
High7.1
Oct 14, 2026
High [CVE-2026-102055] Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
High8.8
Oct 14, 2026
High [CVE-2026-102052] Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
High8.8
Oct 14, 2026
High [CVE-2026-102050] Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
High8.8
Oct 14, 2026
High [CVE-2026-102049] Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled
High8.8
Oct 14, 2026
High [CVE-2026-102046] Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
High7.5
Oct 14, 2026
High [CVE-2026-102044] Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled
High7.5
Oct 14, 2026
High [CVE-2026-102037] Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used
High8.1
Oct 14, 2026
High [CVE-2026-102036] Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service
High7.5
Oct 14, 2026
High [CVE-2026-102030] Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used
High7.5
Oct 14, 2026
High [CVE-2026-102029] Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion
High7.5
Oct 14, 2026
High [CVE-2026-102028] Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used
High7.5
Oct 14, 2026
High [CVE-2026-102027] Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed
High7.5
Oct 14, 2026
High [CVE-2026-102026] Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used
High7.5
Oct 14, 2026
High [CVE-2026-102025] Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used
High7.5
Oct 14, 2026
High [CVE-2026-102024] Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used
High7.5
Oct 14, 2026
High [CVE-2026-102023] Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
High7.5
Oct 14, 2026
High [CVE-2026-102022] Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
High7.5
Oct 14, 2026
High [CVE-2026-102020] Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
High7.5
Oct 14, 2026
High [CVE-2026-102016] Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled
High7.5
Oct 14, 2026
High [CVE-2026-102015] Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used
High8.8
Oct 14, 2026
High [CVE-2026-102014] Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used
High8.8
Oct 14, 2026
High [CVE-2026-102012] Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
High7.5
Oct 14, 2026
High [CVE-2026-101945] Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled
High7.5
Oct 14, 2026
High [CVE-2026-101944] Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used
High7.5
Oct 14, 2026
High [CVE-2026-101943] Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
High7.5
Oct 14, 2026
High [CVE-2026-101942] Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used
High7.5
Oct 14, 2026
High [CVE-2026-101941] Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
High7.5
Oct 14, 2026
High [CVE-2026-101940] Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled
High7.5
Oct 14, 2026
High [CVE-2026-101939] Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used
High7.5
Oct 14, 2026
High [CVE-2026-101927] Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation
High7.8
Oct 14, 2026
High [CVE-2026-101994] Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
High7.1
Oct 14, 2026
High [CVE-2026-102064] Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer
High7.5
Oct 14, 2026
High [CVE-2026-101955] Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used
High8.1
Oct 14, 2026
High [CVE-2026-101997] Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
High8.1
Oct 14, 2026
High [CVE-2026-102062] Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server
High8.1
Oct 14, 2026
High [CVE-2026-102079] OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device
High7.8
Oct 14, 2026
High [CVE-2026-102081] Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS)
High7.5
Oct 14, 2026
High [CVE-2026-102084] Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device
High8.1
Oct 14, 2026
High [CVE-2026-101951] Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised
High7.5
Oct 14, 2026
High [CVE-2026-101957] Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used
High7.5
Oct 14, 2026
High [CVE-2026-102065] Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled
High7.5
Oct 14, 2026
High [CVE-2026-101948] Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
High7.5
Oct 14, 2026
High [CVE-2026-101977] Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
High7.5
Oct 14, 2026
High [CVE-2026-102069] Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via
High8.8

Page 1 of 2 · 100 of 171

Get an email when Juniper publishes the next one.

See Juniper's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Juniper

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.