Login Request a demo
JO
Product
Junos OS Evolved
by Juniper Networks · last CVE Oct 14, 2026
159
CVEs
0
On KEV
9.8
Max CVSS
121
New 30D
Vulnerabilities159In the news0Timeline
Severity mix
Critical 10High 69Medium 78Low 2
Severity
All severities159Critical10High69Medium78Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Junos OS Evolved to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-101954
9.8
0%
Oct 14
Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
Affected: 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; 23.4X100; 25.2X100 before 25.2X100-D35-EVO; 25.4X300 before 25.4X300-D40-EVO
CVE-2026-101983
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
Affected: 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; 26.2 before 26.2R1-S2-EVO; +3 more
CVE-2026-101982
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-33796
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-33789
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102178
9.8
0%
Oct 14
Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102175
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-102031
9.8
2%
Oct 14
Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101990
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
CVE-2026-101986
9.8
1%
Oct 14
Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
Affected: before 23.2R2-S7.7-EVO; 23.4 before 23.4R2-S8.11-EVO; 24.2 before 24.2R2-S5.6-EVO; 24.4 before 24.4R2-S5-EVO; 25.2 before 25.2R2-S2-EVO; 25.4 before 25.4R1-S3-EVO; +4 more
Showing 10