Juniper security advisories, October 2026

Every Juniper Networks security advisory published in October 2026, from Juniper SIRT (JSA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 171
Critical: 17
High: 83
In CISA KEV: 0

Juniper advisories published in October 2026

Oct 14, 2026
High [CVE-2026-102070] Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet
High7.5
Oct 14, 2026
High [CVE-2026-101973] Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used
High7.5
Oct 14, 2026
High [CVE-2026-103994] Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution
High8.8
Oct 14, 2026
High [CVE-2026-101965] Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled
High8.8
Oct 14, 2026
High [CVE-2026-101967] Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used
High8.8
Oct 14, 2026
High [CVE-2026-102068] Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP
High7.5
Oct 14, 2026
High [CVE-2026-101978] Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used
High8.8
Oct 14, 2026
High [CVE-2026-101966] Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service
High8.2
Oct 14, 2026
Medium [CVE-2026-101964] Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet received over an established LDP session
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101959] Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101975] Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-route Prefix-SID installation is configured
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101972] Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via specific OSPFv2 packets sent on an OSPF-enabled interface
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102060] NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received on a directly connected network
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102058] Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102054] Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
Medium4.3
Oct 14, 2026
Medium [CVE-2026-102053] Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
Medium5.3
Oct 14, 2026
Medium [CVE-2026-102051] Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102048] Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102047] Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102045] Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102043] Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102042] Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102041] Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102040] Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102039] Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102035] Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102034] Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102033] Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102032] Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102021] Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102019] Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102018] Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102017] Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102013] Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
Medium4.4
Oct 14, 2026
Medium [CVE-2026-102011] Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102000] Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101999] Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101971] Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101970] Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101969] Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101968] Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled
Medium5.4
Oct 14, 2026
Medium [CVE-2026-101938] Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101937] Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101936] Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101934] Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd
Medium4.4
Oct 14, 2026
Medium [CVE-2026-101984] Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101987] Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101988] Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101989] Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101992] Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101993] Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101996] Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102066] Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a malformed RSVP packet when RSVP is enabled on the receiving interface
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102071] Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a specific RSVP packet
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102078] Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)
Medium5.9
Oct 14, 2026
Medium [CVE-2026-102080] Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service (DoS)
Medium5.3
Oct 14, 2026
Medium [CVE-2026-102082] Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service (DoS)
Medium5.9
Oct 14, 2026
Medium [CVE-2026-102083] Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)
Medium5.9
Oct 14, 2026
Medium [CVE-2026-102085 +1] Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102086] NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS)
Medium5.9
Oct 14, 2026
Medium [CVE-2026-102087] Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS)
Medium6.5
Oct 14, 2026
Medium [CVE-2026-103993] Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities to cause a Denial-of-Service (DoS) as rpd crashes when graceful-shutdown sender community is added when attempting to advertise
Medium6.8
Oct 14, 2026
Medium [CVE-2026-101974] Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102067] Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a crafted RSVP packet when L2 LSP support is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101995] Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
Medium4.3
Oct 14, 2026
Medium [CVE-2026-102072] Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request
Medium6.5
Oct 14, 2026
Medium [CVE-2026-102063] Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101960] Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled
Medium6.5
Oct 14, 2026
Medium [CVE-2026-101985] Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled
Medium6.5
Oct 14, 2026
Low [CVE-2026-101946] Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used
Low3.5
Oct 14, 2026
Low [CVE-2026-101991] Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
Low3.1

Page 2 of 2 · 71 of 171

Get an email when Juniper publishes the next one.

See Juniper's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Juniper

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.