CVE-2026-95714

A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-95712

A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affected service. Successful exploitation could allow an attacker to view some information and to disrupt the availability o...

CVE-2026-95711

An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are...

CVE-2026-79876

A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access...

CVE-2026-79879

Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system...

CVE-2026-79868

Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or...

CVE-2026-79874

An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative access, modify system configurations, and access or manipulate sensitive data...

CVE-2026-95714

A vulnerability exists in AOS-10 where an authenticated adjacent buffer overflow can lead to Remote Code Execution . While the provided documents do not specify the exact component or version affected, the impact is significant as it allows for remote code execution. No specific remediation, expl...

CVE-2026-95711

Technical details are not publicly available in the provided documents for CVE-2026-95711 . Action: monitor for updates.

CVE-2026-79879

CVE-2026-79879 identifies unauthenticated adjacent memory corruption vulnerabilities in AOS-10 . These flaws can lead to Remote Code Execution (RCE). The vulnerability is accessible via an adjacent attack vector with a CVSS v3.1 base score of 8.8 (HIGH) , potentially impacting confidentiality, in...

CVE-2026-79876

CVE-2026-79876 involves an Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing . While the technical root cause and specific affected versions are not detailed in the provided documents, the vulnerability is assigned a CRITICAL severity score of 9.3. The att...

CVE-2026-79870

Technical details regarding the root cause, specific components, or impacted versions for CVE-2026-79870 are not publicly available in the provided documents. While the CVE title mentions an Authentication Bypass leading to Unauthorized Access in AOS-8 , no further technical specifics or remediat...

CVE-2026-79868

Technical details regarding CVE-2026-79868 are not publicly available in the provided documents. While the title suggests Authentication Bypass Vulnerabilities leading to Complete System Compromise in AOS-8 , the description contains no concrete technical details. Monitor for updates.

CVE-2026-79865

CVE-2026-79865 identifies an unauthenticated adjacent memory corruption vulnerability in AOS-10 that can lead to Remote Code Execution . While specific technical root causes are not detailed, the vulnerability allows for remote exploitation. No specific exploit links or remediation details are pr...

CVE-2026-79864

A vulnerability exists in AOS-10 as an Unauthenticated Adjacent Command Injection flaw. The vulnerability allows for unauthorized command execution via adjacent network access. While specific technical root causes and impacted versions are not detailed in the provided documents, the issue is assi...

CVE-2026-102087

An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. When in a BGP traffic engineering scenario a specific, valid, optional,...

CVE-2026-102019

An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed RIPv2 message...

CVE-2026-101971

An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service and heap memory corruption via OSPFv3 messages on an...

CVE-2026-102060

A NULL Pointer Dereference vulnerability exists in the rpd process of Juniper Networks Junos OS (MX Series) and Junos OS Evolved (ACX Series). An unauthenticated adjacent attacker can trigger a denial of service (DoS) by sending an IGMPv3 membership report from a directly connected network. No sp...

CVE-2026-102041

A Reachable Assertion vulnerability exists in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved . An adjacent unauthenticated network attacker can trigger a denial of service by sending malformed RSVP signaling when RSVP is enabled. Specific details regarding affected versi...