Junos OS Evolved vulnerabilities | LiveThreat CVE Feed

Product

Junos OS Evolved

by Juniper Networks · last CVE Oct 14, 2026

159

CVEs

On KEV

9.8

Max CVSS

121

New 30D

Vulnerabilities159 In the news0 Timeline

Severity mix

Critical 10High 69Medium 78Low 2

Severity

All severities159 Critical10 High69 Medium78 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-21919	6.5	0%	Apr 9	Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability Affected: 23.4 before 23.4R2-S5-EVO; 24.2 before 24.2R2-S1-EVO; 24.4 before 24.4R1-S3-EVO, 24.4R2-EVO
CVE-2025-59969	6.5	0%	Apr 9	Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart Affected: before 22.4R3-S8-EVO; 23.2 before 23.2R2-S5-EVO; 23.4 before 23.4R2-EVO; 24.2 before 24.2R2-EVO; 24.4 before 24.4R2-EVO; 22.2 before 22.2R3-S7-EVO; +5 more
CVE-2025-21600	6.5	0%	Jan 9	Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash Affected: 21.4-EVO before 21.4R3-S9-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S4-EVO; 22.4-EVO before 22.4R3-S5-EVO; 23.2-EVO before 23.2R2-S3-EVO; 23.4-EVO before 23.4R2-S2-EVO; +1 more
CVE-2025-21602	6.5	0%	Jan 9	Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash Affected: 21.4 before 21.4R3-S9-EVO; 22.2 before 22.2R3-S5-EVO; 22.3 before 22.3R3-S4-EVO; 22.4 before 22.4R3-S5-EVO; 23.2 before 23.2R2-S3-EVO; 23.4 before 23.4R2-S3-EVO; +1 more
CVE-2025-21593	6.5	0%	Jan 9	Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash Affected: before 21.2R3-S9-EVO; 21.4-EVO before 21.4R3-S10-EVO; 22.2-EVO before 22.2R3-S5-EVO; 22.3-EVO before 22.3R3-S4-EVO; 22.4-EVO before 22.4R3-S3-EVO; 23.2-EVO before 23.2R2-S2-EVO; +1 more
CVE-2022-22250	6.5	0%	Oct 18	Junos OS and Junos OS Evolved: An FPC crash might be seen due to an EVPN MAC entry moving from local to remote Affected: before 20.4R3-S3-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO; 21.4-EVO before 21.4R1-S1-EVO, 21.4R2-EVO
CVE-2022-22238	6.5	0%	Oct 18	Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed Affected: before 20.2R3-S3-EVO; 20.3R1-EVO before 20.3-EVO; 20.4-EVO before 20.4R3-S1-EVO; 21.1R1-EVO before 21.1-EVO; 21.2R1-EVO before 21.2-EVO*; 21.3-EVO before 21.3R2-EVO
CVE-2022-22230	6.5	0%	Oct 18	Junos OS and Junos OS Evolved: RPD crash upon receipt of specific OSPFv3 LSAs Affected: before 20.4R3-S5-EVO; 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-S1-EVO; 21.3-EVO before 21.3R3-S2-EVO; 21.4-EVO before 21.4R2-EVO; 22.1-EVO before 22.1R2-EVO; +1 more
CVE-2022-22224	6.5	0%	Oct 18	Junos OS and Junos OS Evolved: PPMD goes into infinite loop upon receipt of malformed OSPF TLV Affected: before 20.4R3-S3-EVO; 21.1 before 21.1R2-EVO
CVE-2026-33794	5.9	0%	Jul 9	Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash Affected: 24.4R2-EVO before 24.4R2-S3-EVO; 25.2 before 25.2R2, 25.2R2-EVO
CVE-2022-22225	5.9	1%	Oct 18	Junos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash Affected: before 20.4R3-S4-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R2-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2022-22220	5.9	1%	Oct 18	Junos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route Affected: before 20.4R2-EVO; 21.1-EVO before 21.1R2-EVO
CVE-2022-22219	5.9	1%	Oct 18	Junos OS and Junos OS Evolved: RPD core upon receipt of a specific EVPN route by a BGP route reflector in an EVPN environment Affected: 21.3R1-EVO before 21.3*; 21.4 before 21.4R3-EVO; 22.1 before 22.1R1-S2-EVO, 22.1R3-EVO; 22.2 before 22.2R2-EVO
CVE-2022-22208	5.9	1%	Oct 18	Junos OS and Junos OS Evolved: An rpd crash can occur due to memory corruption caused by flapping BGP sessions Affected: before 20.4R3-S4-EVO; 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2026-57025	5.5	0%	Jul 9	Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash Affected: before 23.2R2-S7-EVO; 23.4 before 23.4R2-S8-EVO; 24.2 before 24.2R2-EVO; 24.4 before 24.4R1-S3-EVO
CVE-2026-33776	5.5	0%	Apr 9	Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information Affected: before 23.2R2-S6-EVO; 23.4 before 23.4R2-S6-EVO; 24.2 before 24.2R2-S4-EVO; 24.4 before 24.4R2-S1-EVO; 25.2 before 25.2R2-EVO
CVE-2022-22240	5.5	0%	Oct 18	Junos OS and Junos OS Evolved: An rpd memory leak might be observed while running a specific cli command in a RIB sharding scenario Affected: before 20.4R3-S1-EVO; 21.1R1-EVO before 21.1-EVO*; 21.2-EVO before 21.2R1-S2-EVO, 21.2R3-EVO; 21.3-EVO before 21.3R2-EVO
CVE-2022-22233	5.5	0%	Oct 18	Junos OS and Junos OS Evolved: In an SR to LDP interworking scenario, with SRMS, when a specific low privileged command is issued on an ABR rpd will crash Affected: 21.4-EVO before 21.4R1-S2-EVO, 21.4R2-S1-EVO, 21.4R3-EVO; 22.1-EVO before 22.1R2-EVO
CVE-2026-101968	5.4	0%	Oct 14	Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102053	5.3	0%	Oct 14	Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-57029	5.3	0%	Jul 9	Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash Affected: before 23.4R2-S7-EVO; 24.2 before 24.2R2-S5-EVO; 24.4 before 24.4R2-S3-EVO; 25.2 before 25.2R2-EVO
CVE-2022-22227	5.3	1%	Oct 18	Junos OS Evolved: ACX7000 Series: Specific IPv6 transit traffic gets exceptioned to the routing-engine which causes increased CPU utilization Affected: 21.1-EVO before 21.1R3-S2-EVO; 21.2-EVO before 21.2R3-S2-EVO; 21.3-EVO before 21.3R3-EVO; 21.4-EVO before 21.4R1-S1-EVO, 21.4R2-EVO
CVE-2026-102013	4.4	0%	Oct 14	Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101934	4.4	0%	Oct 14	Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-21901	4.4	0%	Jul 9	Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash Affected: 23.2 before 23.2R2-S7-EVO; 23.4 before 23.4R2-S8-EVO
CVE-2026-102054	4.3	0%	Oct 14	Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101995	4.3	0%	Oct 14	Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-33799	4.3	0%	Jul 9	Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash Affected: before 21.2R3-S8-EVO; 21.4 before 21.4R3-S7-EVO; 22.1 before 22.1; 22.2 before 22.2R3-S4-EVO; 22.3 before 22.3R3-S3-EVO; 22.4 before 22.4; +2 more