JO
Network Security
Junos OS
On CISA KEVExploited in the wild
932
CVEs
8
On KEV
10.0
Max CVSS
141
New 30D
Severity mix
Critical 52High 393Medium 55Low 0
Watch
Add Junos OS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-21918 | 7.5 | Jan 15 | Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes Affected: before 22.4R3-S7; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; 24.2 before 24.2R2 |
| CVE-2026-21917 | 7.5 | Jan 15 | Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash Affected: 23.2R2-S2 before 23.2R2-S5; 23.4R2-S1 before 23.4R2-S5; 24.2 before 24.2R2-S2; 24.4 before 24.4R1-S3, 24.4R2 |
| CVE-2026-21914 | 7.5 | Jan 15 | Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash Affected: before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S3; 24.4 before 24.4R2-S2; 25.2 before 25.2R1-S1, 25.2R2 |
| CVE-2026-21913 | 7.5 | Jan 15 | Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart Affected: 24.4 before 24.4R2; 25.2 before 25.2R1-S2, 25.2R2 |
| CVE-2026-21906 | 7.5 | Jan 15 | Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash Affected: before 21.4R3-S12; 22.4 before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S5; 24.2 before 24.2R2-S3; 24.4 before 24.4R2-S1; +1 more |
| CVE-2026-21905 | 7.5 | Jan 15 | Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash Affected: before 21.2R3-S10; 21.4 before 21.4R3-S12; 22.4 before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S3; +2 more |
| CVE-2025-60003 | 7.5 | Jan 15 | Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash Affected: before 22.4R3-S8; 23.2 before 23.2R2-S5; 23.4 before 23.4R2-S6; 24.2 before 24.2R2-S2; 24.4 before 24.4R2 |
| CVE-2025-60004 | 7.5 | Oct 9 | Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash Affected: 23.4R2-S3 before 23.4R2-S5; 24.2R2 before 24.2R2-S1; 24.4R1 before 24.4R1-S3, 24.4R2 |
| CVE-2025-59964 | 7.5 | Oct 9 | Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart Affected: 24.4 before 24.4R1-S3, 24.4R2 |
| CVE-2025-52981 | 7.5 | Jul 11 | Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S11; 22.2 before 22.2R3-S7; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S4; 23.4 before 23.4R2-S4; +1 more |
| CVE-2025-52980 | 7.5 | Jul 11 | Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message Affected: 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; 23.2 before 23.2R2; 23.4 before 23.4R2 |
| CVE-2025-52946 | 7.5 | Jul 11 | Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash Affected: before 21.2R3-S9; 21.4; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; +1 more |
| CVE-2025-30660 | 7.5 | Apr 9 | Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE reset Affected: before 21.2R3-S9; 21.4 before 21.4R3-S8; 22.2 before 22.2R3-S4; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S2; 23.4 before 23.4R2 |
| CVE-2025-30659 | 7.5 | Apr 9 | Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed traffic Affected: 21.4R1 before 21.4*; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; 24.2 before 24.2R2 |
| CVE-2025-30658 | 7.5 | Apr 9 | Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; +1 more |
| CVE-2025-30656 | 7.5 | Apr 9 | Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; +1 more |
| CVE-2025-30651 | 7.5 | Apr 9 | Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S10; 22.2 before 22.2R3-S6; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S2; 23.4 before 23.4R2 |
| CVE-2025-30649 | 7.5 | Apr 9 | Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS. Affected: before 22.2R3-S6; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S4; 24.2 before 24.2R1-S2, 24.2R2 |
| CVE-2025-30645 | 7.5 | Apr 9 | Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash Affected: before 21.2R3-S9; 21.4 before 21.4R3-S9; 22.2 before 22.2R3-S5; 22.4 before 22.4R3-S6; 23.2 before 23.2R2-S3; 23.4 before 23.4R2 |
| CVE-2025-30644 | 7.5 | Apr 9 | Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled Affected: before 21.4R3-S9; 22.2 before 22.2R3-S5; 22.4 before 22.4R3-S5; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; 24.2 before 24.2R2 |
| CVE-2025-21601 | 7.5 | Apr 9 | Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device Affected: before 21.4R3-S9; 22.2 before 22.2R3-S5; 22.4 before 22.4R3-S4; 23.2 before 23.2R2-S3; 23.4 before 23.4R2-S3; 24.2 before 24.2R1-S1, 24.2R2 |
| CVE-2025-21594 | 7.5 | Apr 9 | Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block Affected: before 21.2R3-S8; 21.4 before 21.4R3-S7; 22.1 before 22.1R3-S6; 22.2 before 22.2R3-S4; 22.3 before 22.3R3-S3; 22.4 before 22.4R3-S2; +2 more |
| CVE-2024-39564 | 7.5 | Feb 5 | Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crash Affected: 22.4 before 22.4R3-S4 |
| CVE-2025-21598 | 7.5 | Jan 9 | Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash Affected: 21.2R3-S8 before 21.2R3-S9; 21.4R3-S7 before 21.4R3-S9; 22.2R3-S4 before 22.2R3-S5; 22.3R3-S2 before 22.3R3-S4; 22.4R3 before 22.4R3-S5; 23.2R2 before 23.2R2-S2; +2 more |
| CVE-2024-47504 | 7.5 | Oct 11 | An Improper Validation of Specified Type of Input vulnerability in the packet forwarding engine (pfe) Juniper Networks Junos OS on SRX5000 Series allows an unauthenticated,… Affected: 22.1; 22.1; 22.1; 22.1; 22.1; 22.1; +34 more |
| CVE-2024-47499 | 7.5 | Oct 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-47497 | 7.5 | Oct 11 | An Uncontrolled Resource Consumption vulnerability in the http daemon (httpd) of Juniper Networks Junos OS on SRX Series, QFX Series, MX Series and EX Series allows an… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39525 | 7.5 | Oct 9 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39516 | 7.5 | Oct 9 | An Out-of-Bounds Read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39515 | 7.5 | Oct 9 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39552 | 7.5 | Jul 11 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a network based,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39551 | 7.5 | Jul 11 | An Uncontrolled Resource Consumption vulnerability in the H.323 ALG (Application Layer Gateway) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 and MS-MPC/MIC,… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-39549 | 7.5 | Jul 11 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing process daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to send… Affected: through 21.1; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39545 | 7.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the the IKE daemon (iked) of Juniper Networks Junos OS on SRX Series, MX Series with SPC3 and NFX350… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-39542 | 7.5 | Jul 11 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MPC10/11 or LC9600,… Affected: 21.4; 21.4; 21.4; 21.4; 22.2; 22.2; +3 more |
| CVE-2024-39540 | 7.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on SRX Series, and MX Series with SPC3… Affected: 21.2 |
| CVE-2024-39530 | 7.5 | Jul 11 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis management daemon (chassisd) of Juniper Networks Junos OS allows an unauthenticated,… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.1; +14 more |
| CVE-2024-39529 | 7.5 | Jul 11 | A Use of Externally-Controlled Format String vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated,… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39555 | 7.5 | Jul 10 | An Improper Handling of Exceptional Conditions vulnerability in the Routing Protocol Daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a… Affected: before 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-39518 | 7.5 | Jul 10 | A Heap-based Buffer Overflow vulnerability in the telemetry sensor process (sensord) of Juniper Networks Junos OS on MX240, MX480, MX960 platforms using MPC10E causes a steady… Affected: 21.2; 21.2; 21.4; 21.4; 22.2; 22.2; +16 more |
| CVE-2024-21586 | 7.5 | Jul 1 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on SRX Series and NFX Series allows an… Affected: 21.4; 21.4; 21.4; 21.4; 21.4; 21.4; +34 more |
| CVE-2024-30398 | 7.5 | Apr 12 | An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an… Affected: 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30397 | 7.5 | Apr 12 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30392 | 7.5 | Apr 12 | A Stack-based Buffer Overflow vulnerability in Flow Processing Daemon (flowd) of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to cause Denial of… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30382 | 7.5 | Apr 12 | An Improper Handling of Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based,… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-30405 | 7.5 | Apr 12 | An Incorrect Calculation of Buffer Size vulnerability in Juniper Networks Junos OS SRX 5000 Series devices using SPC2 line cards while ALGs are enabled allows an attacker sending… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30395 | 7.5 | Apr 12 | An Improper Validation of Specified Type of Input vulnerability in Routing Protocol Daemon (RPD) of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-30394 | 7.5 | Apr 12 | A Stack-based Buffer Overflow vulnerability in the Routing Protocol Daemon (RPD) component of Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to… Affected: before 21.2; 21.2; 21.2; 21.2; 21.2; 21.2; +34 more |
| CVE-2024-21598 | 7.5 | Apr 12 | An Improper Validation of Syntactic Correctness of Input vulnerability in the Routing Protocol Daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a… Affected: 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
| CVE-2024-21619 | 7.5 | Jan 25 | A Missing Authentication for Critical Function vulnerability combined with a Generation of Error Message Containing Sensitive Information vulnerability in J-Web of Juniper… Affected: before 20.4; 20.4; 20.4; 20.4; 20.4; 20.4; +34 more |
The 500 most important CVEs for this product (exploited first, then by severity)