Login Request a demo
JO
Product
Junos OS Evolved
by Juniper Networks · last CVE Oct 14, 2026
176
CVEs
0
On KEV
9.8
Max CVSS
121
New 30D
Vulnerabilities176In the news0Timeline
Severity mix
Critical 11High 73Medium 90Low 2
Severity
All severities176Critical11High73Medium90Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102024
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102023
7.5
0%
Oct 14
Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102022
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
Affected: 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO
CVE-2026-102020
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102016
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102012
7.5
1%
Oct 14
Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101945
7.5
1%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101944
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101943
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101942
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101941
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101940
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101939
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102064
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101951
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101957
7.5
1%
Oct 14
Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102065
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled
Affected: 23.4; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-101948
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
Affected: 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 23.4X100; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO
CVE-2026-101977
7.5
0%
Oct 14
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102068
7.5
1%
Oct 14
Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2025-60003
7.5
0%
Jan 15
Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO
CVE-2025-60004
7.5
0%
Oct 9
Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash
Affected: 23.4R2-S2-EVO before 23.4R2-S5-EVO; 24.2R2-EVO before 24.2R2-S1-EVO; 24.4R1-EVO before 24.4R1-S3-EVO, 24.4R2-EVO
CVE-2025-21598
7.5
1%
Jan 9
Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash
Affected: 21.4R3-S7-EVO before 21.4R3-S9-EVO; 22.2R3-S4-EVO before 22.2R3-S5-EVO; 22.3R3-S2-EVO before 22.3R3-S4-EVO; 22.4R3-EVO before 22.4R3-S5-EVO; 23.2R2-EVO before 23.2R2-S2-EVO; 23.4R1-EVO before 23.4R2-S1-EVO; +1 more
CVE-2025-21599
7.5
1%
Jan 9
Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of Service
Affected: 22.4-EVO before 22.4R3-S5-EVO; 23.2-EVO before 23.2R2-S2-EVO; 23.4-EVO before 23.4R2-S2-EVO; 24.2-EVO before 24.2R1-S2-EVO, 24.2R2-EVO
CVE-2022-22247
7.5
1%
Oct 18
Junos OS Evolved: Kernel processing of unvalidated TCP segments could lead to a Denial of Service (DoS)
Affected: 21.3-EVO before 21.3R3-EVO; 21.4-EVO before 21.4R2-EVO; 22.1-EVO before 22.1R2-EVO
CVE-2022-22211
7.5
1%
Oct 18
Junos OS Evolved: PTX Series: Multiple FPCs become unreachable due to continuous polling of specific SNMP OID
Affected: before 20.4R3-S4-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2R1-EVO before 21.2-EVO*; 21.3-EVO before 21.3R3-EVO; 21.4-EVO before 21.4R2-EVO; 22.1-EVO before 22.1R2-EVO
CVE-2022-22192
7.5
1%
Oct 18
Junos OS Evolved: PTX Series: An attacker can cause a kernel panic by sending a malformed TCP packet to the device
Affected: 20.4-EVO before 20.4R3-S4-EVO; 21.3-EVO before 21.3R3-EVO; 21.4-EVO before 21.4R3-EVO; 22.1-EVO before 22.1R2-EVO
CVE-2026-33797
7.4
0%
Apr 9
Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset
Affected: 25.2 before 25.2R2-EVO
CVE-2025-59960
7.4
0%
Jan 15
Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server
Affected: before 21.4R3-S12-EVO; 22.2 before 22.2*; 22.4 before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S2-EVO; +2 more
CVE-2026-57028
7.3
0%
Jul 9
Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
Affected: before 23.2R2-EVO
CVE-2022-22248
7.3
0%
Oct 18
Junos OS Evolved: Incorrect file permissions can allow low-privileged user to cause another user to execute arbitrary commands
Affected: 20.4-EVO before 20.4R3-S1-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2026-102056
7.1
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101994
7.1
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-21908
7.1
0%
Jan 15
Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process
Affected: 23.2R2-S1 before 23.2R2-S5-EVO; 23.4R2 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S3-EVO; 24.4 before 24.4R2-S1-EVO; 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO
CVE-2026-103993
6.8
0%
Oct 14
Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-33791
6.7
1%
Apr 9
Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-S7-EVO; 24.2 before 24.2R2-S2-EVO; 24.4 before 24.4R2-EVO; 25.2 before 25.2R1-S1-EVO, 25.2R2-EVO
CVE-2026-101964
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-101959
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101975
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101972
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102060
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102058
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102051
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102047
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102045
6.5
0%
Oct 14
Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
Affected: 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO
CVE-2026-102043
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102042
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102041
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102040
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102039
6.5
0%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
Page 2 of 4 · 176 total
1234