Login Request a demo
JO
Network Security
Junos OS
by Juniper · last CVE Oct 14, 2026
On CISA KEVExploited in the wild
931
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Vulnerabilities931In the news2Timeline
Severity mix
Critical 52High 392Medium 56Low 0
Severity
All severities500Critical52High392Medium56Low0
Exploitation
On CISA KEV8Exploited in the wild8
Watch

Add Junos OS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-36851
In wildKEV
5.3
1%
Sep 26
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files
Affected: 21.2 before 21.2R3-S8; 21.4 before 21.4R3-S6; 22.1 before 22.1R3-S5; 22.2 before 22.2R3-S3; 22.3 before 22.3R3-S2; 22.4 before 22.4R2-S2, 22.4R3; +1 more
CVE-2023-36846
In wildKEV
5.3
93%
Aug 17
Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S3; +3 more
CVE-2023-36844
In wildKEV
5.3
90%
Aug 17
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
Affected: before 20.4R3-S9; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S5; 22.1 before 22.1R3-S4; +4 more
CVE-2023-36847
In wildKEV
5.3
83%
Aug 17
Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files
Affected: before 20.4R3-S8; 21.1 before 21.1*; 21.2 before 21.2R3-S6; 21.3 before 21.3R3-S5; 21.4 before 21.4R3-S4; 22.1 before 22.1R3-S3; +3 more
CVE-2025-21590
In wildKEV
4.4
2%
Mar 12
Junos OS: An local attacker with shell access can execute arbitrary code
Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more
CVE-2026-103993
6.8
0%
Oct 14
Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2025-59957
6.8
0%
Oct 9
An Origin Validation Error vulnerability in an insufficient protected file of Juniper Networks Junos OS on EX4600 Series and QFX5000 Series allows an unauthenticated attacker with…
Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +12 more
CVE-2023-28972
6.8
0%
Apr 17
An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass console access controls
Affected: 19.2; 19.2; 19.2; 19.2; 19.2; 19.2; +34 more
CVE-2021-25220
6.8
3%
Mar 23
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those…
Affected: before 19.3; 19.3; 19.3; 19.3; 19.3; 19.3; +34 more
CVE-2022-22154
6.8
0%
Jan 19
In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device (SD) control state machine of Juniper Networks Junos OS allows an…
Affected: 16.1; 16.1; 16.1; 16.1; 16.1; 16.1; +34 more
CVE-2021-0210
6.8
1%
Jan 15
An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through…
Affected: 12.3; 12.3; 12.3; 12.3; 12.3; 12.3; +34 more
CVE-2020-1618
6.8
0%
Apr 8
On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any password
Affected: 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; 14.1x53; +34 more
CVE-2019-0035
6.8
0%
Apr 10
When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected
Affected: 15.1; 15.1; 15.1; 15.1; 15.1; 15.1; +34 more
CVE-2018-0053
6.8
0%
Oct 10
An authentication bypass vulnerability in the initial boot sequence of Juniper Networks Junos OS on vSRX Series may allow an attacker to gain full control of the system without…
Affected: 15.1x49; 15.1x49; 15.1x49
CVE-2016-1285
6.8
57%
Mar 9
named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause…
Affected: 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more
CVE-2026-33791
6.7
1%
Apr 9
Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
Affected: before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S7; 24.2 before 24.2R2-S2; 24.4 before 24.4R2; 25.2 before 25.2R2
CVE-2025-30650
6.7
0%
Apr 8
Junos OS: Privileged local user can gain access to a Linux-based FPC as root
Affected: before 22.4R3-S8; 23.2 before 23.2R2-S6; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S3; 24.4 before 24.4R2; 25.2 before 25.2R2
CVE-2025-52988
6.7
0%
Jul 11
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a…
Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more
CVE-2021-0219
6.7
1%
Jan 15
A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with privileges to execute…
Affected: 17.3; 17.3; 17.3; 17.3; 17.3; 17.3; +34 more
CVE-2020-1619
6.7
0%
Apr 8
A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine (NG-RE), allows a local…
Affected: 16.1; 16.1; 16.1; 16.1; 16.1; 16.1; +34 more
CVE-2016-1267
6.7
0%
Apr 15
Race condition in the RPC functionality in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46-D40, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R11, 12.3X48 before…
Affected: through 12.1x44; 12.1x46; 12.1x46; 12.1x46; 12.1x46; 12.1x46; +34 more
CVE-2026-101964
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
Affected: 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; 26.2 before 26.2R1-S2
CVE-2026-101959
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101975
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101972
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102060
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102058
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102051
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102048
6.5
0%
Oct 14
Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102047
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102043
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102042
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102041
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102040
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102039
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102035
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102034
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102033
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102032
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present
Affected: 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; 26.2 before 26.2R1-S2
CVE-2026-102021
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
Affected: 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; 26.2 before 26.2R1-S2
CVE-2026-102019
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102018
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102017
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102011
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-102000
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101999
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101971
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101970
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101969
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
CVE-2026-101938
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
Affected: before 23.2R2-S7.7; 23.4 before 23.4R2-S8.13; 24.2 before 24.2R2-S5.5; 24.4 before 24.4R2-S5; 25.2 before 25.2R2-S2; 25.4 before 25.4R1-S3; +1 more
Page 1 of 2 · 56 total
12
The 500 most important CVEs for this product (exploited first, then by severity)