JO
Product
Junos OS Evolved
248
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 95Medium 151Low 0
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33791 | 6.7 | Apr 9 | Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2025-52988 | 6.7 | Jul 11 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +17 more |
| CVE-2024-47495 | 6.7 | Oct 11 | An Authorization Bypass Through User-Controlled Key vulnerability allows a locally authenticated attacker with shell access to gain full control of the device when Dual Routing… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39512 | 6.6 | Jul 10 | An Improper Physical Access Control vulnerability in the console port control of Juniper Networks Junos OS Evolved allows an attacker with physical access to the device to get… Affected: 23.2; 23.4; 23.4; 23.4 |
| CVE-2020-1666 | 6.6 | Oct 16 | The system console configuration option 'log-out-on-disconnect' In Juniper Networks Junos OS Evolved fails to log out an active CLI session when the console cable is disconnected Affected: 19.2; 19.2; 19.3; 19.4; 19.4; 19.4; +1 more |
| CVE-2026-33803 | 6.5 | Jul 9 | Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker Affected: before 23.2; 23.2; 23.2; 23.2; 23.2; 23.2; +34 more |
| CVE-2026-33801 | 6.5 | Jul 9 | Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes Affected: 25.2; 25.2; 25.2; 25.2 |
| CVE-2026-33783 | 6.5 | Apr 9 | Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2026-33780 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +25 more |
| CVE-2026-21919 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability Affected: 23.4; 23.4; 23.4; 23.4; 23.4; 23.4; +11 more |
| CVE-2025-59969 | 6.5 | Apr 9 | Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +34 more |
| CVE-2026-21921 | 6.5 | Jan 15 | A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privileges… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +23 more |
| CVE-2026-21911 | 6.5 | Jan 15 | An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2026-21909 | 6.5 | Jan 15 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: 23.2; 23.2; 23.2; 23.2; 23.4; 23.4; +4 more |
| CVE-2025-59967 | 6.5 | Oct 9 | A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on… Affected: 23.2; 23.2; 23.2; 23.2; 23.4; 23.4; +1 more |
| CVE-2025-59958 | 6.5 | Oct 9 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on PTX Series allows an… Affected: before 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +6 more |
| CVE-2025-52961 | 6.5 | Oct 9 | An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management (CFM) daemon and the Connectivity Fault Management Manager (cfmman) of Juniper Networks… Affected: 23.2; 23.2; 23.2; 23.2; 23.2; 23.2; +15 more |
| CVE-2025-52964 | 6.5 | Jul 11 | A Reachable Assertion vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-52955 | 6.5 | Jul 11 | An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated… Affected: 21.2; 21.4; 22.2; 22.4; 22.4; 22.4; +29 more |
| CVE-2025-52953 | 6.5 | Jul 11 | An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-52949 | 6.5 | Jul 11 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +34 more |
| CVE-2025-30653 | 6.5 | Apr 9 | An Expired Pointer Dereference vulnerability in Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to… Affected: before 22.2; 22.2; 22.2; 22.2; 22.2; 22.2; +23 more |
| CVE-2025-30646 | 6.5 | Apr 9 | A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon (l2cpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-21595 | 6.5 | Apr 9 | A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-21600 | 6.5 | Jan 9 | Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2025-21602 | 6.5 | Jan 9 | Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2025-21593 | 6.5 | Jan 9 | Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-47509 | 6.5 | Oct 11 | An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 22.1; +3 more |
| CVE-2024-47508 | 6.5 | Oct 11 | An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated,… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +23 more |
| CVE-2024-47505 | 6.5 | Oct 11 | An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved allows an authenticated,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-47498 | 6.5 | Oct 11 | An Unimplemented or Unsupported Feature in UI vulnerability in the CLI of Juniper Networks Junos OS Evolved on QFX5000 Series allows an unauthenticated, adjacent attacker to cause… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +33 more |
| CVE-2024-39526 | 6.5 | Oct 11 | An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS on MX Series with MPC10/MPC11/LC9600 line cards, EX9200 with… Affected: 19.4 before 21.2; 19.3; 19.3; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39553 | 6.5 | Jul 11 | An Exposure of Resource to Wrong Sphere vulnerability in the sampling service of Juniper Networks Junos OS Evolved allows an unauthenticated network-based attacker to send… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39543 | 6.5 | Jul 11 | A Buffer Copy without Checking Size of Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39541 | 6.5 | Jul 11 | An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: 22.4; 22.4; 22.4; 22.4; 22.4; 22.4; +10 more |
| CVE-2024-39538 | 6.5 | Jul 11 | A Buffer Copy without Checking Size of Input vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39537 | 6.5 | Jul 11 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved on ACX 7000 Series allows an unauthenticated,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39535 | 6.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX 7000 Series allows an… Affected: 22.4; 22.4 |
| CVE-2024-39519 | 6.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved on ACX7000 Series allows an… Affected: 22.2 before 22.4; 22.4; 22.4; 22.4; 22.4 |
| CVE-2024-39560 | 6.5 | Jul 10 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a logically adjacent… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39558 | 6.5 | Jul 10 | An Unchecked Return Value vulnerability in the Routing Protocol Daemon (rpd) on Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows a logically adjacent,… Affected: before 20.4; 21.2 before 21.3; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39557 | 6.5 | Jul 10 | An Uncontrolled Resource Consumption vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39517 | 6.5 | Jul 10 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Layer 2 Address Learning Daemon (l2ald) on Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39514 | 6.5 | Jul 10 | An Improper Check or Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos and Junos OS Evolved allows an… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30380 | 6.5 | Apr 16 | An Improper Handling of Exceptional Conditions vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a Denial of… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30403 | 6.5 | Apr 12 | A NULL Pointer Dereference vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial… Affected: 23.2; 23.2 |
| CVE-2024-21618 | 6.5 | Apr 12 | An Access of Memory Location After End of Buffer vulnerability in the Layer-2 Control Protocols Daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-21590 | 6.5 | Apr 12 | An Improper Input Validation vulnerability in Juniper Tunnel Driver (jtd) and ICMP module of Juniper Networks Junos OS Evolved allows an unauthenticated attacker within the MPLS… Affected: through 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21613 | 6.5 | Jan 12 | A Missing Release of Memory after Effective Lifetime vulnerability in Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: 21.3; 21.3; 21.3; 21.3; 21.3; 21.3; +24 more |
| CVE-2023-44204 | 6.5 | Oct 13 | An Improper Validation of Syntactic Correctness of Input vulnerability in Routing Protocol Daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated,… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |