Juniper Networks Junos OS CLI Command Injection

The vulnerability in the command-line interface CLI of the Juniper Networks Junos OS MX Series routers is related to improper handling of special elements. Exploitation of this vulnerability enables an attacker to execute arbitrary commands with root privileges and gain unauthorized access to...

CVE-2026-102077

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On MX Series with SPC3 line-card and source NAT...

CVE-2026-102182

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be enabled with an RSA-signature IKE policy to be...

CVE-2026-102080

An Improper Resource Locking vulnerability in the clock synchronization daemon clksyncd of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service DoS. If a SyncE or PTP upstream node sends a malformed message to an MX device...

CVE-2026-102063

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF...

CVE-2026-102077

A vulnerability exists in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 line-cards. Due to an improper check for unusual conditions, an unauthenticated network-based attacker can send specific malformed IPv6 packets in a source NAT scenario. Instead of bei...

EUVD-2026-101410

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On MX Series with SPC3 line-card and source NAT...

CVE-2026-102077 Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On MX Series with SPC3 line-card and source NAT...

CVE-2026-102077 Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. On MX Series with SPC3 line-card and source NAT...

CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be enabled with an RSA-signature IKE policy to be...

EUVD-2026-101397

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue affects Junos OS on MX Series: All versions before 21.2R3-S11; from...

CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be enabled with an RSA-signature IKE policy to be...

CVE-2026-102182

Juniper Networks Junos OS on MX Series is vulnerable to a Stack-based Buffer Overflow in the kmd component . An unauthenticated network attacker can exploit this by sending specific IKE certificate-based packets to achieve root-level code execution . Affected versions include all versions before ...

CVE-2026-102060 Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used

A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received on a directly connected network...

CVE-2026-102055

A Stack-based Buffer Overflow vulnerability exists in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms. An unauthenticated attacker on an adjacent network can execute arbitrary code as root or cause a denial of service by sending a specific C...

CVE-2026-102046 Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic...

CVE-2026-102046

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability exists in the netsctp.ko component of Juniper Networks Junos OS on MX Series devices. An unauthenticated network attacker can exploit this flaw by sending crafted SCTP network traffic , leading to a denial of service on the Ro...

CVE-2026-102046 Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic...

CVE-2026-102079 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection

An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...

CVE-2026-102080 Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover

An Improper Resource Locking vulnerability in the clock synchronization daemon clksyncd of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent attacker to cause a Denial-of-Service DoS. If a SyncE or PTP upstream node sends a malformed message to an MX device...