2900 matches found
EUVD-2026-101374
A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated...
EUVD-2026-101338
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled...
CVE-2026-102017
An Out-of-bounds Write vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows an unauthenticated attacker to trigger a routing-plane denial of service by sending Auto-RP mapping announcements when Auto-RP mapping is enabled. No specific exploi...
CVE-2026-101938 Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used
An Integer Underflow Wrap or Wraparound vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session...
CVE-2026-101938
Juniper Networks Junos OS and Junos OS Evolved on the SRX Series are affected by an Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe component. This flaw occurs when SVR vector routing is utilized, allowing an adjacent unauthenticated attacker to trigger an ICMP message associat...
CVE-2026-101937
A Signed to Unsigned Conversion Error vulnerability exists in the srxpfe component of Juniper Networks Junos OS on the SRX Series . This flaw allows an adjacent attacker to trigger a denial of service (DoS) of the data plane by targeting chassis-cluster fabric traffic when chassis-cluster high av...
CVE-2026-103994 Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution
A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon vgd of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and possibly remote code execution...
CVE-2026-96615
Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition CRD and have an authenticated gRPC connection with NGINX Agent. A namespaced authenticated attacker with access to a service account may impersonate the authenticated NGINX Agent gRP...
CVE-2026-97629
Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...
DEBIAN-CVE-2026-97629
Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...
AZL-108458 CVE-2026-97629 affecting package nginx 1.30.4-1
Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...
CVE-2026-91184
Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm and spec.jwt.realm field of a namespaced AuthenticationFilter verbatim, unescaped and unvalidated, into the shared data-plane nginx.conf as authbasic "";. A namespaced authenticated attacker that configures...
DEBIAN-CVE-2026-93479
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
AZL-108461 CVE-2026-93479 affecting package nginx 1.30.4-1
A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture variables before referencing the map output variable. Alternatively, the same result could be achieved by using a...
CVE-2026-15176
A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referencing the $requestfilename variable. Alternatively, the same result could be achieved when the $requestfilename variable...
CVE-2026-104939
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
DEBIAN-CVE-2026-101019
Description NGINX JavaScript njs has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built-in njs and QuickJS backends during the canonicalization process, the $attr$Name getter may return undefined for an...
CVE-2026-104939
The NGINX Ingress Controller is affected by a vulnerability (CWE-303) involving the incorrect implementation of an authentication algorithm . Specifically, the controller may mishandle HTTP responses from an OAuth Identity Provider (IdP) when implementing an externalAuth policy for ingress. This ...
CVE-2026-104939 NGINX Ingress Controller vulnerability
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...
EUVD-2026-101122
Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAuth IdP and allow an attacker to acquire unauthenticated access to protected paths before the proper external...