327916 matches found
CVE-2026-33798
A Stack-based Buffer Overflow vulnerability exists in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series . This flaw allows an L2-adjacent attacker to achieve arbitrary code execution as root by leveraging high-availability fabric traffic . The vulnerability ...
CVE-2026-33792
A Stack-based Buffer Overflow vulnerability exists in the srxpfe process of Juniper Networks Junos OS running on SRX Series devices. An unauthenticated network attacker can exploit this by sending a crafted packet received on a configured GRE tunnel . Successful exploitation could allow the attac...
CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel...
CVE-2026-102175 Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used
A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...
CVE-2026-102175
A Heap-based Buffer Overflow vulnerability exists in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved . A remote unauthenticated attacker capable of controlling or intercepting the configured SDX/SRC server connection can exploit this by sending a crafted frame...
CVE-2026-102055
A Stack-based Buffer Overflow vulnerability exists in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms. An unauthenticated attacker on an adjacent network can execute arbitrary code as root or cause a denial of service by sending a specific C...
CVE-2026-102055 Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent t...
CVE-2026-101990
A Stack-based Buffer Overflow vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . A remote configured BGP peer can trigger an rpd crash or, on Junos OS, achieve remote code-execution by sending a flow-spec update that is selected for re-ad...
CVE-2026-101990 Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement...
EUVD-2026-101480
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement...
CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...
CVE-2026-101997
Juniper Networks Junos OS on SRX Series is vulnerable to an SQL Injection vulnerability within the ipfd component. An unauthenticated network-based attacker can exploit this flaw to achieve Remote Code Execution with root privileges when a Security Intelligence feed connection is configured witho...
CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server...
CVE-2026-102062 Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server...
CVE-2026-102062
A Use of Externally-Controlled Format String vulnerability exists in the ipfd daemon of Juniper Networks Junos OS on SRX Series devices. This flaw allows an unauthenticated network-based attacker to achieve remote code execution with root privileges . The vulnerability is triggered when the syste...
CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution
An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...
CVE-2026-102084
A buffer overflow vulnerability exists in the VPN daemon of Juniper Networks Junos OS on SRX Series devices. This flaw stems from an Improper Validation of Syntactic Correctness of Input when the device is configured for AutoDiscovery VPN (ADVPN) . An authenticated, network-based attacker who can...
EUVD-2026-101458
An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker to take complete control of the device. If an SRX device configured for AutoDiscovery VPN ADVPN receives a message fr...
CVE-2024-3408-dtale
CVE-2024-3408 - D-Tale Authentication Bypass & RCE Reproducible lab environment for CVE-2024-3408, an authentication bypass and remote code execution vulnerability in D-Tale. Vulnerability D-Tale versions up to 3.15.1 are vulnerable due to: 1. Hardcoded SECRETKEY "Dtale" for Flask session signing...