Lucene search
K

554 matches found

Tenable Nessus
Tenable Nessus
added 2026/04/29 12:0 a.m.5 views

Juniper Junos OS Vulnerability (JSA79188)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA79188 advisory. - A Missing Authentication for Critical Function vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows...

6.3CVSS5.7AI score0.00103EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.1 views

CVE-2026-33785

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

8.8CVSS5.9AI score0.00007EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/04/13 7:23 p.m.0 views

CVE-2026-33775

A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If the authentication packet-type option is...

7.1CVSS5.8AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.0 views

EUVD-2026-21197

An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. If an affected device receives a...

8.7CVSS5.9AI score0.00148EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/10 12:30 a.m.3 views

EUVD-2026-21086

A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If the authentication packet-type option is...

7.1CVSS5.8AI score0.00025EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/10 12:30 a.m.4 views

EUVD-2026-21204

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

8.8CVSS6AI score0.00007EPSS
Exploits0References2
NVD
NVD
added 2026/04/09 10:16 p.m.3 views

CVE-2026-33785

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

8.8CVSS0.00007EPSS
Exploits0References1
NVD
NVD
added 2026/04/09 10:16 p.m.0 views

CVE-2026-33775

A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If the authentication packet-type option is...

7.1CVSS0.00025EPSS
Exploits0References1
NVD
NVD
added 2026/04/09 10:16 p.m.2 views

CVE-2026-33778

An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. If an affected device receives a...

8.7CVSS0.00148EPSS
Exploits0References1
NVD
NVD
added 2026/04/09 10:16 p.m.1 views

CVE-2026-33774

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the configured firewall filter and access the control-plane of the device. On MX platform...

6.9CVSS0.00039EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/04/09 9:37 p.m.14 views

CVE-2026-33785 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

8.8CVSS0.00007EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 9:37 p.m.1 views

CVE-2026-33785 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

8.8CVSS5.9AI score0.00007EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:37 p.m.1 views

CVE-2026-33785

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices. Any user logged in, without requiring specific privileges, ca...

8.8CVSS6AI score0.00007EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2026/04/09 9:35 p.m.7 views

CVE-2026-33778

CVE-2026-33778 affects Junos OS on SRX Series and MX Series. The vulnerability is in the IPsec library used by kmd/iked, where processing a specifically malformed first ISAKMP packet can cause the kmd/iked process to crash and restart. This results in a momentary inability to establish new securi...

8.7CVSS5.9AI score0.00148EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2026/04/09 9:35 p.m.17 views

CVE-2026-33778 Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes

An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. If an affected device receives a...

8.7CVSS0.00148EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 9:34 p.m.2 views

CVE-2026-33774 Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the configured firewall filter and access the control-plane of the device. On MX platform...

6.9CVSS5.8AI score0.00039EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/09 9:30 p.m.0 views

CVE-2026-33775 Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If the authentication packet-type option is...

7.1CVSS5.8AI score0.00025EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/09 9:30 p.m.1 views

CVE-2026-33775

A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If the authentication packet-type option is...

7.1CVSS5.8AI score0.00025EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/09 9:30 p.m.17 views

CVE-2026-33775 Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon bbe-smgd of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If the authentication packet-type option is...

7.1CVSS0.00025EPSS
Exploits0References1
CVE
CVE
added 2026/04/09 9:30 p.m.3 views

CVE-2026-33775

CVE-2026-33775 describes a memory leak (Missing Release of Memory after Effective Lifetime) in Juniper Junos OS MX Series bbe-smgd that can be triggered by a mismatch between configured and received packet types. An adjacent, unauthenticated attacker may cause a DoS by exhausting heap memory, aft...

7.1CVSS5.8AI score0.00025EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder