JO
Product
Junos OS Evolved
159
CVEs
0
On KEV
9.8
Max CVSS
121
New 30D
Severity mix
Critical 10High 69Medium 78Low 2
Watch
Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-103993 | 6.8 | Oct 14 | Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-33791 | 6.7 | Apr 9 | Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S7-EVO; 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO; 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO |
| CVE-2026-101964 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more |
| CVE-2026-101959 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101975 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101972 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102060 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102058 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102051 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102047 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102045 | 6.5 | Oct 14 | Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled Affected: 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO |
| CVE-2026-102043 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102042 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102041 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102040 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102039 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102035 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102034 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102033 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102032 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more |
| CVE-2026-102021 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled Affected: 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO |
| CVE-2026-102019 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102018 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102017 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102011 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102000 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101999 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101971 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101970 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101969 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101938 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101984 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101987 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101988 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more |
| CVE-2026-101989 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101992 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101993 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101996 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102066 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102071 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102085 | 6.5 | Oct 14 | Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S4-EVO; 25.2 before 25.2R2-S1-EVO; 25.4 before 25.4R1-S1-EVO |
| CVE-2026-102087 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes Affected: before 23.2R2-S6-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO |
| CVE-2026-101974 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-102067 | 6.5 | Oct 14 | Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more |
| CVE-2026-101960 | 6.5 | Oct 14 | Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more |
| CVE-2026-101985 | 6.5 | Oct 14 | Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more |
| CVE-2026-33803 | 6.5 | Jul 9 | Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker Affected: before 23.2R2-S7-EVO; 23.4 before 23.4R2-S8-EVO; 24.2 before 24.2R2-S5-EVO; 24.4 before 24.4R2-S4-EVO; 25.2 before 25.2R2-S1-EVO; 25.4 before 25.4R1-S2-EVO |
| CVE-2026-33801 | 6.5 | Jul 9 | Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes Affected: 25.2 before 25.2R2-EVO |
| CVE-2026-33783 | 6.5 | Apr 9 | Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes Affected: before 22.4R3-S9-EVO; 23.2 before 23.2R2-S6-EVO; 23.4 before 23.4R2-S7-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S2-EVO; 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO |
| CVE-2026-33780 | 6.5 | Apr 9 | Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald Affected: all version prior to before 22.4R3-S5-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S4-EVO; 24.2 before 24.2R2-EVO |
