‹ Back to list

Juniper Networks

Juniper Networks Junos OS: vulnerabilities and CVEs

Juniper Networks Junos OS has 8 published vulnerabilities, 8 of them in the last 12 months. 1 are rated critical and 0 are listed by CISA as actively exploited.

CVEs8
Last 12 months8
Critical1
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-102077High (8.7)0.34%—Oct 14, 2026
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause…
CVE-2026-102084Critical (9.2)0.51%—Oct 14, 2026
An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device.…
CVE-2026-102083High (8.2)0.31%—Oct 14, 2026
An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When UTM WebFiltering is…
CVE-2026-102052High (8.7)0.34%—Oct 14, 2026
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary…
CVE-2026-102050High (8.7)0.30%—Oct 14, 2026
A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane…
CVE-2026-102041High (7.1)0.27%—Oct 14, 2026
A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated network attacker to cause a denial of service via malformed RSVP…
CVE-2026-102026High (8.7)0.46%—Oct 14, 2026
An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash…
CVE-2026-102019High (7.1)0.27%—Oct 14, 2026
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1499 Endpoint Denial of Service6
  2. T1190 Exploit Public-Facing Application4
  3. T1210 Exploitation of Remote Services4
  4. T1059 Command and Scripting Interpreter2

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Juniper Networks