Juniper Networks Junos OS vulnerabilities

141 CVEs affecting Juniper Networks Junos OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-102077, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-102059, published 2026-10-14. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX…
CVE-2026-101956, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos commands with root…
CVE-2026-102175, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or…
CVE-2026-33789, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and…
CVE-2026-102079, published 2026-10-14. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command…
CVE-2026-33792, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of…
CVE-2026-102174, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with…
CVE-2026-101986, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content…
CVE-2026-101982, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on…
CVE-2026-101990, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on…

Latest

CVE-2026-102077, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated,…
CVE-2026-101983, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial…
CVE-2026-101981, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or…
CVE-2026-101979, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a…
CVE-2026-101976, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability…
CVE-2026-101975, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic…
CVE-2026-101972, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of…
CVE-2026-101964, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet…
CVE-2026-101963, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN…