CVEs we hold for Juniper
Records whose assigning authority named Juniper as the affected vendor. Newest identifiers first, capped at 200.
Announced together
One group of these records was published under a single advisory. Its page names that advisory, counts what the group offers, and says what it does not cover.
Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.
CVE-2026-57054Junos OS: MX Series: Web filtering doesn't block specifically formatted URLsJuniper Networks Junos OS
CVE-2026-57032Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crashJuniper Networks Junos OS
CVE-2026-57031Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effectJuniper Networks Junos OS
CVE-2026-57030Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoSJuniper Networks Junos OS
CVE-2026-57029Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crashJuniper Networks Junos OS Evolved
CVE-2026-57028Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attackerJuniper Networks Junos OS Evolved
CVE-2026-57027Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crashJuniper Networks Junos OS
CVE-2026-57026Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crashJuniper Networks Junos OS
CVE-2026-57025Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching'…Juniper Networks Junos OS Evolved
CVE-2026-57024Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuouslyJuniper Networks Junos OS
CVE-2026-57023Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crashJuniper Networks Junos OS
CVE-2026-57022Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the…Juniper Networks Junos OS
CVE-2026-57021Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crashJuniper Networks Junos OS
CVE-2026-57020Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast floodJuniper Networks Junos OS
CVE-2026-33803Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attackerJuniper Networks Junos OS Evolved
CVE-2026-33802Junos OS: EX Series: Unauthorized users can execute service-impacting CLI commandJuniper Networks Junos OS
CVE-2026-33801Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashesJuniper Networks Junos OS Evolved
CVE-2026-33800Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crashJuniper Networks Junos OS
CVE-2026-33799Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crashJuniper Networks Junos OS Evolved
CVE-2026-33797Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP resetJuniper Networks Junos OS Evolved
CVE-2026-33794Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crashJuniper Networks Junos OS Evolved
CVE-2026-33793Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user…Juniper Networks Junos OS Evolved
CVE-2026-33791Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as rootJuniper Networks Junos OS Evolved
CVE-2026-33790Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe…Juniper Networks Junos OS
CVE-2026-33788Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCsJuniper Networks Junos OS Evolved
CVE-2026-33787Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashesJuniper Networks Junos OS
CVE-2026-33786Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashesJuniper Networks Junos OS
CVE-2026-33785Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenarioJuniper Networks Junos OS
CVE-2026-33784JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized…Juniper Networks JSI LWC
CVE-2026-33783Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received…Juniper Networks Junos OS Evolved
CVE-2026-33782Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logoutsJuniper Networks Junos OS
CVE-2026-33781Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks…Juniper Networks Junos OS
CVE-2026-33780Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2aldJuniper Networks Junos OS Evolved
CVE-2026-33779Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communicationJuniper Networks Junos OS
CVE-2026-33778Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashesJuniper Networks Junos OS
CVE-2026-33776Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive informationJuniper Networks Junos OS Evolved
CVE-2026-33775Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgdJuniper Networks Junos OS
CVE-2026-33774Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effectJuniper Networks Junos OS
CVE-2026-33773Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of…Juniper Networks Junos OS
CVE-2026-33771CTP OS: Configuring password requirements does not work which permits the use of weak passwordsJuniper Networks CTP OS
CVE-2026-21921Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors…Juniper Networks Junos OS Evolved
CVE-2026-21920Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crashJuniper Networks Junos OS
CVE-2026-21919Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management…Juniper Networks Junos OS Evolved
CVE-2026-21918Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashesJuniper Networks Junos OS
CVE-2026-21917Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crashJuniper Networks Junos OS
CVE-2026-21916Junos OS: A low privileged user can escalate their privileges so that they can login as rootJuniper Networks Junos OS
CVE-2026-21915JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to rootJuniper Networks JSI LWC
CVE-2026-21914Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crashJuniper Networks Junos OS
CVE-2026-21913Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restartJuniper Networks Junos OS
CVE-2026-21912Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card resetJuniper Networks Junos OS
CVE-2026-21911Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stopJuniper Networks Junos OS Evolved
CVE-2026-21910Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic dropJuniper Networks Junos OS
CVE-2026-21909Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crashJuniper Networks Junos OS Evolved
CVE-2026-21908Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the…Juniper Networks Junos OS Evolved
CVE-2026-21907Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers)Juniper Networks Junos Space
CVE-2026-21906Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to…Juniper Networks Junos OS
CVE-2026-21905Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow…Juniper Networks Junos OS
CVE-2026-21904Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2026-21903Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crashJuniper Networks Junos OS
CVE-2026-21902Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as rootJuniper Networks Junos OS Evolved
CVE-2026-21901Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crashJuniper Networks Junos OS Evolved
CVE-2026-0203Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restartJuniper Networks Junos OS
CVE-2025-6549Junos OS: SRX Series: J-Web can be exposed on additional interfacesJuniper Networks Junos OS
CVE-2025-60011Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing…Juniper Networks Junos OS Evolved
CVE-2025-60010Junos OS and Junos OS Evolved: Device allows login for user with expired passwordJuniper Networks Junos OS Evolved
CVE-2025-60009Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-60007Junos OS: A specifically crafted 'show chassis' command causes chassisd to crashJuniper Networks Junos OS
CVE-2025-60006Junos OS Evolved: OS command injection vulnerabilities fixedJuniper Networks Junos OS Evolved
CVE-2025-60004Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crashJuniper Networks Junos OS Evolved
CVE-2025-60003Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crashJuniper Networks Junos OS Evolved
CVE-2025-60002Junos Space: Template Definitions page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-60001Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-60000Junos Space: Generate Report page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59999Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59998Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59997Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59996Junos Space: Configuration View page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59995Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59994Junos Space: Quick Template page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59993Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59992Junos Space: Secure Console page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59991Junos Space: Device Management pages are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59990Junos Space: Template creation pages are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59989Junos Space: Device Discovery page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59988Junos Space: Generate Report page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59987Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59986Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59985Junos Space: Purging Policy field is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59984Junos Space: Global Search is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59983Junos Space: Template Definition page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59982Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59981Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injectionJuniper Networks Junos Space
CVE-2025-59980Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowedJuniper Networks Junos OS
CVE-2025-59978Junos Space: Stored cross-site scripting vulnerability in web applicationJuniper Networks Junos Space
CVE-2025-59976Junos Space: Arbitrary file download vulnerability in web interfaceJuniper Networks Junos Space
CVE-2025-59975Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoSJuniper Networks Junos Space
CVE-2025-59974Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerabilityJuniper Networks Junos Space Security Director
CVE-2025-59969Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand /…Juniper Networks Junos OS Evolved
CVE-2025-59968Junos Space Security Director: Insufficient authorization for sensitive resources in web interfaceJuniper Networks Junos OS
CVE-2025-59967Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic…Juniper Networks Junos OS Evolved
CVE-2025-59964Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding…Juniper Networks Junos OS
CVE-2025-59962Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crashJuniper Networks Junos OS Evolved
CVE-2025-59961Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writableJuniper Networks Junos OS Evolved
CVE-2025-59960Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP serverJuniper Networks Junos OS Evolved
CVE-2025-59959Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crashJuniper Networks Junos OS Evolved
CVE-2025-59958Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the REJuniper Networks Junos OS Evolved
CVE-2025-59957Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoorJuniper Networks Junos OS
CVE-2025-52989Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configurationJuniper Networks Junos OS Evolved
CVE-2025-52988Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout'Juniper Networks Junos OS Evolved
CVE-2025-52987Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressedJuniper Networks Paragon Automation (Pathfinder, Planner…
CVE-2025-52986Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaksJuniper Networks Junos OS Evolved
CVE-2025-52985Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not…Juniper Networks Junos OS Evolved
CVE-2025-52984Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is…Juniper Networks Junos OS Evolved
CVE-2025-52983Junos OS: After removing ssh public key authentication root can still log inJuniper Networks Junos OS
CVE-2025-52982Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crashJuniper Networks Junos OS
CVE-2025-52981Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crashJuniper Networks Junos OS
CVE-2025-52980Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE messageJuniper Networks Junos OS
CVE-2025-52964Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath…Juniper Networks Junos OS Evolved
CVE-2025-52961Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can…Juniper Networks Junos OS Evolved
CVE-2025-52960Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a…Juniper Networks Junos OS
CVE-2025-52958Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crashJuniper Networks Junos OS Evolved
CVE-2025-52955Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and…Juniper Networks Junos OS Evolved
CVE-2025-52954Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby…Juniper Networks Junos OS Evolved
CVE-2025-52953Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP…Juniper Networks Junos OS Evolved
CVE-2025-52952Junos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or…Juniper Networks Junos OS
CVE-2025-52951Junos OS: IPv6 firewall filter fails to match payload-protocolJuniper Networks Junos OS
CVE-2025-52950Juniper Security Director: Insufficient authorization for multiple endpoints in web interfaceJuniper Security Director
CVE-2025-52949Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crashJuniper Networks Junos OS Evolved
CVE-2025-52948Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabledJuniper Networks Junos OS
CVE-2025-52947Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crashJuniper Networks Junos OS
CVE-2025-52946Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crashJuniper Networks Junos OS Evolved
CVE-2025-30661Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalationJuniper Networks Junos OS
CVE-2025-30660Junos OS: MX Series: Decapsulation of specific GRE packets leads to PFE resetJuniper Networks Junos OS
CVE-2025-30659Junos OS: SRX Series: A device configured for vector routing crashes when receiving malformed trafficJuniper Networks Junos OS
CVE-2025-30658Junos OS: SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak…Juniper Networks Junos OS
CVE-2025-30657Junos OS: Processing of a specific BGP update causes the SRRD process to crashJuniper Networks Junos OS
CVE-2025-30656Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crashJuniper Networks Junos OS
CVE-2025-30655Junos OS and Junos OS Evolved: A specific CLI command will cause an RPD crash when rib-sharding and update-threading is…Juniper Networks Junos OS Evolved
CVE-2025-30654Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive informationJuniper Networks Junos OS Evolved
CVE-2025-30653Junos OS and Junos OS Evolved: LSP flap in a specific MPLS scenario leads to rpd crashJuniper Networks Junos OS Evolved
CVE-2025-30652Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crashJuniper Networks Junos OS Evolved
CVE-2025-30651Junos OS and Junos OS Evolved: Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crashJuniper Networks Junos OS Evolved
CVE-2025-30650Junos OS: Privileged local user can gain access to a Linux-based FPC as rootJuniper Networks Junos OS
CVE-2025-30649Junos OS: MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS.Juniper Networks Junos OS
CVE-2025-30648Junos OS and Junos OS Evolved: Receipt of a specifically malformed DHCP packet causes jdhcpd process to crashJuniper Networks Junos OS Evolved
CVE-2025-30647Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leakJuniper Networks Junos OS
CVE-2025-30646Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crashJuniper Networks Junos OS Evolved
CVE-2025-30645Junos OS: SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crashJuniper Networks Junos OS
CVE-2025-30644Junos OS: EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP…Juniper Networks Junos OS
CVE-2025-21602Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crashJuniper Networks Junos OS Evolved
CVE-2025-21601Junos OS: SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services…Juniper Networks Junos OS
CVE-2025-21600Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes…Juniper Networks Junos OS Evolved
CVE-2025-21599Junos OS Evolved: Receipt of specifically malformed IPv6 packets causes kernel memory exhaustion leading to Denial of…Juniper Networks Junos OS Evolved
CVE-2025-21598Junos OS and Junos OS Evolved: When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to…Juniper Networks Junos OS Evolved
CVE-2025-21597Junos OS and Junos OS Evolved: When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core…Juniper Networks Junos OS Evolved
CVE-2025-21596Junos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crashJuniper Networks Junos OS
CVE-2025-21595Junos OS and Junos OS Evolved: In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crashJuniper Networks Junos OS Evolved
CVE-2025-21594Junos OS: MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port blockJuniper Networks Junos OS
CVE-2025-21593Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to…Juniper Networks Junos OS Evolved
CVE-2025-21592Junos OS: SRX Series: Low privileged user able to access highly sensitive information on file systemJuniper Networks Junos OS
CVE-2025-21591Junos OS: An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crashJuniper Networks Junos OS
CVE-2025-21590Junos OS: An local attacker with shell access can execute arbitrary codeJuniper Networks Junos OS
CVE-2025-21589Session Smart Router, Session Smart Conductor, WAN Assurance Router: API Authentication Bypass vulnerabilityJuniper Networks WAN Assurance Managed Router
CVE-2025-13914Apstra: SSH host key validation vulnerability for managed devicesJuniper Networks Apstra
CVE-2025-11198Security Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy…Juniper Networks Security Director Policy Enforcer
CVE-2024-47509Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #3Juniper Networks Junos OS Evolved
CVE-2024-47508Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #2Juniper Networks Junos OS Evolved
CVE-2024-47507Junos OS and Junos OS Evolved: BGP update message containing aggregator attribute with an ASN value of zero (0) is…Juniper Networks Junos OS Evolved
CVE-2024-47506Junos OS: SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crashJuniper Networks Junos OS
CVE-2024-47505Junos OS Evolved: Specific low privileged CLI commands and SNMP GET requests can trigger a resource leak #1Juniper Networks Junos OS Evolved
CVE-2024-47504Junos OS: SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crashJuniper Networks Junos OS
CVE-2024-47503Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crashJuniper Networks Junos OS
CVE-2024-47502Junos OS Evolved: TCP session state is not always cleared on the Routing Engine leading to DoSJuniper Networks Junos OS Evolved
CVE-2024-47501Junos OS: MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show…Juniper Networks Junos OS
CVE-2024-47499Junos OS and Junos OS Evolved: In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crashJuniper Networks Junos OS Evolved
CVE-2024-47498Junos OS Evolved: QFX5000 Series: Configured MAC learning and move limits are not in effectJuniper Networks Junos OS Evolved
CVE-2024-47497Junos OS: SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustionJuniper Networks Junos OS
CVE-2024-47496Junos OS: MX Series: The PFE will crash on running specific commandJuniper Networks Junos OS
CVE-2024-47495Junos OS Evolved: In a dual-RE scenario a locally authenticated attacker with shell privileges can take over the device.Juniper Networks Junos OS Evolved
CVE-2024-47494Junos OS: Due to a race condition AgentD process causes a memory corruption and FPC resetJuniper Networks Junos OS
CVE-2024-47493Junos OS: MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crashJuniper Networks Junos OS
CVE-2024-47491Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP path attribute leads to an RPD crashJuniper Networks Junos OS Evolved
CVE-2024-47490Junos OS Evolved: ACX 7000 Series: Receipt of specific transit MPLS packets causes resources to be exhaustedJuniper Networks Junos OS Evolved
CVE-2024-47489Junos OS Evolved: ACX Series: Receipt of specific transit protocol packets is incorrectly processed by the REJuniper Networks Junos OS Evolved
CVE-2024-39565Junos OS: J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device.Juniper Networks, Inc. Junos OS
CVE-2024-39564Junos OS and Junos OS Evolved: Receipt of malformed BGP path attributes leads to RPD crashJuniper Networks Junos OS Evolved
CVE-2024-39563Junos Space: Remote Command Execution (RCE) vulnerability in web applicationJuniper Networks Junos Space
CVE-2024-39562Junos OS Evolved: A high rate of SSH connections causes a Denial of ServiceJuniper Networks Junos OS Evolved
CVE-2024-39561Junos OS: SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with…Juniper Networks Junos OS
CVE-2024-39560Junos OS and Junos OS Evolved: Memory leak due to RSVP neighbor persistent error leading to kernel crashJuniper Networks Junos OS Evolved
CVE-2024-39559Junos OS Evolved: Receipt of a specific TCP packet may result in a system crash (vmcore) on dual RE systems with NSR…Juniper Networks Junos OS Evolved
CVE-2024-39558Junos OS and Junos OS Evolved: Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRRJuniper Networks Junos OS Evolved
CVE-2024-39557Junos OS Evolved: MAC table changes cause a memory leakJuniper Networks Junos OS Evolved
CVE-2024-39556Junos OS and Junos OS Evolved: Loading a malicious certificate from the CLI may result in a stack-based overflowJuniper Networks Junos OS Evolved
CVE-2024-39555Junos OS and Junos OS Evolved: Receipt of a specific malformed BGP update causes the session to resetJuniper Networks Junos OS Evolved
CVE-2024-39554Junos OS and Junos OS Evolved: BGP multipath incremental calculation is resulting in an rpd crashJuniper Networks Junos OS Evolved
CVE-2024-39553Junos OS Evolved: Receipt of arbitrary data when sampling service is enabled, leads to partial Denial of Service (DoS).Juniper Networks Junos OS Evolved
CVE-2024-39552Junos OS and Junos OS Evolved: Malformed BGP UPDATE causes RPD crashJuniper Networks Junos OS Evolved
200 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.