Juniper Networks Junos OS Evolved vulnerabilities

121 CVEs affecting Juniper Networks Junos OS Evolved, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-101983, published 2026-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-101978, published 2026-10-14. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to…
CVE-2026-101967, published 2026-10-14. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as…
CVE-2026-102059, published 2026-10-14. High severity, CVSS 8.8. EPSS: 3.9% chance of exploitation in the next 30 days. An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX…
CVE-2026-102031, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+…
CVE-2026-102068, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when…
CVE-2026-102175, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or…
CVE-2026-33789, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and…
CVE-2026-101965, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption,…
CVE-2026-101986, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content…
CVE-2026-102012, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry…

Latest

CVE-2026-101983, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial…
CVE-2026-101982, published 2026-10-14. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on…
CVE-2026-101981, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or…
CVE-2026-101979, published 2026-10-14. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a…
CVE-2026-101976, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability…
CVE-2026-101975, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic…
CVE-2026-101972, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of…
CVE-2026-101964, published 2026-10-14. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet…
CVE-2026-101963, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN…
CVE-2026-101962, published 2026-10-14. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically…