EUVD-2026-101320

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from...

CVE-2026-101942 Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from...

CVE-2026-101942

An Improper Handling of Length Parameter Inconsistency vulnerability exists in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved . An unauthenticated network-based attacker can trigger a denial of service (DoS) by sending a malformed EVPN Type-3 or Type-4...

CVE-2026-102081 Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic

A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. On SRX4000 Series, and SRX5000 Series with SPC3, and MX...

CVE-2026-102083 Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash

An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When UTM WebFiltering is configured and the WebFiltering cloud server is unreachable, sustained HTTP...

CVE-2026-102085 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

CVE-2026-102085 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

CVE-2026-102085

A vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause limited information disclosure and availability impact . The root cause is an Improper Restriction of Communication Channel to Intended Endpoints (CWE-923) resulting from a wrong initia...

EUVD-2026-101456

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

EUVD-2026-101455

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used

A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol TWAMP client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet...

PT-2026-114196

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised. This issue does not affect...

PT-2026-113921

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process whi...

PT-2026-113914

A Use After Free vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When web filtering for TCP traffic is configured, a high volume of DNS requests increases the likelihoo...

Juniper Junos OS Vulnerability (JSA112182)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA112182 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series with SPC3 allows an...

PT-2026-113798

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description An improper input validation issue exists in the routing protocol daemon rpd. This allows an unauthenticate...

CVE-2026-101943: Improper Input Validation

An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message...

PT-2026-113861

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

CVE-2026-102020: Reachable Assertion

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

CVE-2026-101942: Improper Handling of Length Parameter Inconsistency

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from...