CVE-2026-101955 Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used

A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled...

CVE-2026-102084

A buffer overflow vulnerability exists in the VPN daemon of Juniper Networks Junos OS on SRX Series devices. This flaw stems from an Improper Validation of Syntactic Correctness of Input when the device is configured for AutoDiscovery VPN (ADVPN) . An authenticated, network-based attacker who can...

CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...

EUVD-2026-101458

An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...

CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution

An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...

USN-8930-1: U-Boot vulnerabilities

Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. CVE-2026-74220, CVE-2026-74221...

USN-8930-1 u-boot vulnerabilities

Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker could possibly use this issue to trigger a buffer overflow, resulting in a denial of service or arbitrary code execution. CVE-2026-74220, CVE-2026-74221...

CVE-2026-102069 Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

EUVD-2026-101438

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

CVE-2026-102069

A Stack-based Buffer Overflow vulnerability exists in the dot1x daemon of Juniper Networks Junos OS devices when operating as Junos Fusion Aggregation Devices . The flaw is triggered when dot1x synchronization is enabled for the required Fusion satellite topology. An adjacent attacker acting as a...

CVE-2026-102069 Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

CVE-2026-103994 Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-103994

A Heap-based Buffer Overflow vulnerability exists in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS . A malicious or compromised SDN-controller can send a crafted OVSDB message to trigger this flaw, potentially causing a complete outage of the OVSDB control plane or leading to remote...

EUVD-2026-101434

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-103994 Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...

CVE-2026-102068 Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP...

EUVD-2026-101429

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP...

hplip: heap-based buffer overflow can lead to remote code execution

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...

hplip: heap-based buffer overflow can lead to remote code execution

A flaw was found in HPLIP. A heap-based buffer overflow could potentially allow an attacker to achieve code execution, escalate privileges, cause a denial of service, disclose sensitive information, or perform unauthorized file modifications under certain conditions...

Important: Red Hat Security Advisory: hplip security, bug fix, and enhancement update

An update for hplip is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...