Juniper Junos OS Multiple Vulnerabilities (JSA112187)

The version of Junos OS installed on the remote host is affected by multiple vulnerabilities as referenced in the JSA112187 advisory. - A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP...

bootzd daemon Juniper Networks Junos OS Evolved Command Execution

The vulnerability in the automatic boot configuration daemon of Juniper Networks Junos OS Evolved is related to improper handling of special elements. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary commands...

J-Web Management Tool Code Execution

The vulnerability in the web interface of the J-Web management tool for Juniper Networks Junos OS and Junos OS Evolved stems from flaws in the authentication process. Exploitation of this vulnerability enables a remote attacker to execute arbitrary code with elevated privileges...

Juniper Networks RPD DoS

The vulnerability in the Routing Protocol Daemon RPD for Juniper Networks Junos OS and Junos OS Evolved involves pointer dereferencing. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted BGP packet...

Juniper Networks Secure Vector Routing RCE

The vulnerability in the Secure Vector Routing SVR technology of Juniper Networks’ Junos OS and Junos OS Evolved SRX Series routers is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability enables a remote attacker to compromise the confidentiality, integrity, and...

Juniper Networks Routing Protocol Daemon DoS

The vulnerability in the Routing Protocol Daemon rpd for Juniper Networks Junos OS and Juniper Networks Junos OS Evolved is related to improper validation of input data consistency. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Juniper Networks RPD Code Execution

The vulnerability in the Routing Protocol Daemon RPD for Juniper Networks Junos OS and Junos OS Evolved involves buffer overflow in memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service or execute arbitrary code...

Juniper Networks RPD DoS

The vulnerability in the Routing Protocol Daemon RPD for Juniper Networks Junos OS and Junos OS Evolved involves pointer dereferencing. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Juniper Networks Junos OS Evolved Privilege Escalation

The gRPC vulnerability in Juniper Networks Junos OS Evolved is related to improper handling of format strings. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service, gain unauthorized access to protected information, or execute arbitrary code with root...

Juniper Junos OS Evolved 25.4 PTX Series Unauthenticated Remote Code Execution

Juniper Junos OS Evolved on PTX Series versions before 25.4R1-S1-EVO and 25.4R2-EVO contain an unauthenticated remote code execution vulnerability. The supplied proof of concept creates and executes a command through the affected configuration API. https://packetstorm.news/download/237898...

Juniper Networks Junos OS Evolved DoS

The jti-dialoutd daemon vulnerability in Juniper Networks Junos OS Evolved is related to improper handling of format strings. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Demon Routing Protocol Daemon RCE

The vulnerability of the Demon Routing Protocol Daemon RPD in Juniper Networks’ Junos OS and Junos OS Evolved operating systems is related to incorrect initialization of resources. Exploiting this vulnerability allows a malicious actor to cause service failure by repeatedly announcing an outdated...

CVE-2026-101983

A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured...

CVE-2026-101975

A Reachable Assertion vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-route Prefix-SID installation is configured...

CVE-2026-101981

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message...

CVE-2026-101959

A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping...

CVE-2026-101954 Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web...

CVE-2026-101954

Juniper Networks Junos OS and Junos OS Evolved are affected by an Improper Authentication vulnerability (CWE-287) in the J-Web management interface and its NETCONF session handling . An unauthenticated network attacker can exploit a reachable J-Web HTTP or HTTPS service to obtain root-level devic...

CVE-2026-101954 Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled

An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web...

CVE-2026-101952 Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or...