CVE-2026-102058 Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled

A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic...

EUVD-2026-101383

A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic...

CVE-2026-102058 Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled

A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic...

CVE-2026-102058

A Reachable Assertion vulnerability exists in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms. An unauthenticated adjacent attacker can cause a denial of service by sending crafted BFD session traffic , which triggers a restart of the daemon. No specific patch versions...

CVE-2026-102011 Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

CVE-2026-102011

A Reachable Assertion vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . An adjacent attacker can trigger a denial of service (DoS) by causing the rpd process to crash. This occurs during an established LDP session when two misconfigured neighbors, or a si...

EUVD-2026-101331

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors or one neighbor duplicated by an L2 loop advertise the same transport address ...

EUVD-2026-101329

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message...

EUVD-2026-101490

An Integer Underflow Wrap or Wraparound vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session...

CVE-2026-102082 Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs

An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS...

EUVD-2026-101461

An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause a Denial-of-Service DoS. This issue is will occur when 'ssl-proxy' is configured on SRX platforms and during a TLS...

CVE-2026-102082

Juniper Networks Junos OS on SRX Series platforms is vulnerable to a Denial-of-Service (DoS) attack due to an Improper Handling of Missing Special Element in the SSL plugin. When ssl-proxy is configured, receiving a specifically malformed TLS message during a TLS session-resumption attempt leads ...

CVE-2026-102087 Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes

An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service DoS. When in a BGP traffic engineering scenario a specific, valid, optional,...

CVE-2026-59951

The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol MCP. From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, including FastMCP, MCPServer, Server.streamablehttpapp, and StreamableHTTPSessionManager, retain session entries without an id...

EUVD-2026-101443

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session...

CVE-2026-89073

Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...

BMC Helix Network Management Authorization Issues Vulnerability

Versions of BMC Helix Network Management prior to 26.3.01 have an authorization issue vulnerability. This vulnerability stems from the bypass of authentication when configuring SAML single-sign-on. Unverified attackers can log in as a local administrator using any password. By submitting an...

Aureus ERP cross-site scripting vulnerability

Aureus ERP versions 1.6.0 and earlier have a cross-site scripting vulnerability. This vulnerability stems from the fact that holiday names are rendered as HtmlString without proper escaping in the HolidayAction.php file. This can lead to storage-type cross-site scripting attacks. Authenticated...

Eclipse Jetty encryption issue vulnerability

A vulnerability related to encryption exists in Eclipse Jetty versions 9.4.0 through 9.4.64, 10.0.0 through 10.0.32, 11.0.0 through 11.0.32, 12.0.0 through 12.0.38, and 12.1.0 through 12.1.12. This vulnerability arises because SessionAuthentication retains authentication credentials within...

Apache Airflow session mechanism vulnerability

Versions of Apache Airflow prior to 0.11.1 have a session mechanism vulnerability. This vulnerability arises from the improper termination of sessions when users log out. Although the logout route revokes the issued tokens, KeycloakJWTMiddleware issues new, unrevoked tokens in the same response. ...