CVE-2024-39560

Juniper Junos OS and Junos OS Evolved are affected by CVE-2024-39560 via the routing protocol daemon (rpd). The issue is an improper handling of exceptional conditions that lets a logically adjacent downstream RSVP neighbor induce kernel memory exhaustion and a DoS. Affected ranges include multip...

CVE-2026-33800

CVE-2026-33800 affects Junos OS on MX Series (MX FPCs up to MPC9). The issue is caused by an unchecked input for a loop condition in PFEMAN, where high-rate Micro-BFD session flaps queue events and a VC with locality-bias amplifies processing time, causing PFEMAN to miss processing and the PFEMAN...

CVE-2023-22409

This CVE concerns Juniper Networks Junos OS NAT functionality where an unchecked input for a loop condition in the NAT library can crash SPC3 on SRX/MX devices, causing a DoS when an inconsistent deterministic NAT configuration is used and a specific CLI command is executed. The issue is triggere...

CVE-2023-44184

The CVE-2023-44184 issue affects Juniper Networks Junos OS and Junos OS Evolved in the mgd (management daemon) component. A memory-buffer bound check violation allows a network-based, authenticated, low-privileged attacker to execute a specific NETCONF command that can cause CPU denial of service...

CVE-2024-47496

CVE-2024-47496 affects Juniper Networks Junos OS on MX Series devices with MPC1–MPC9 line cards. A NULL pointer dereference in the Packet Forwarding Engine (pfe) can crash pfe when a specific command is run, causing traffic forwarding interruption and a sustained DoS until self-recovery. Affected...

CVE-2023-28963

Summary: CVE-2023-28963 is an Improper Authentication vulnerability in cert-mgmt.php of Juniper Networks Junos OS J-Web component. An unauthenticated, network-based attacker can read arbitrary files from temporary folders on affected devices. Affected software: Juniper Networks Junos OS running J...

CVE-2024-21606

CVE-2024-21606 affects Juniper Networks Junos OS on SRX Series with a Double Free vulnerability in the flowd daemon . In a remote-access VPN, if a tcp-encap-profile is configured and a sequence of specific packets is received, a flowd crash and restart can occur, caused by a faulty free operation...

CVE-2024-39527

CVE-2024-39527 describes an exposure of sensitive information vulnerability in the CLI of Juniper Networks Junos OS on SRX Series devices. A local, low-privileged user with CLI access can view protected files on the file system through crafted CLI commands, enabling information disclosure as desc...

CVE-2024-39539

CVE-2024-39539 affects Junos OS on MX Series (pre-21.2R3-S6, pre-21.4R3-S6, pre-22.1R3-S5, pre-22.2R3-S3, pre-22.3R3-S2, pre-22.4R3, pre-23.2R2). It is a Missing Release of Memory after Effective Lifetime vulnerability causing memory leaks when subscribers log in repeatedly, ultimately triggering...

CVE-2020-1614

CVE-2020-1614 : A hard-coded credentials vulnerability affects the Juniper Networks NFX250 Series vSRX VNF. It targets the vSRX VNF instance on versions prior to 19.2R1 and occurs when the root password has not been configured, allowing an attacker with access to an administrative service (e.g., ...

CVE-2024-39533

CVE-2024-39533 affects Junos OS on QFX5000 Series and EX4600 Series where an Unimplemented or Unsupported Feature in the UI allows an unauthenticated, network-based attacker to cause a minor integrity impact on downstream networks when certain match conditions (ip-source-address, ip-destination-a...

CVE-2024-39545

The CVE describes an Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS iked (on SRX Series, MX Series with SPC3, and NFX350), where unauthenticated network-based attackers can trigger an iked crash during IPsec negotiations by sending specific mismatching parameter...

CVE-2024-39555

Summary of vulnerability (CVE-2024-39555): Juniper Networks Junos OS and Junos OS Evolved RPD mishandles certain malformed BGP Update messages when segment routing is enabled, causing session resets and potential DoS. A remote attacker must have at least one established BGP session; affected are ...

CVE-2025-52989

CVE-2025-52989 describes an Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved. A local, authenticated attacker with high privileges can exploit a specially crafted annotate configuration command to modify any part of the device configu...

CVE-2023-28975

CVE-2023-28975 affects Juniper Networks Junos OS: an Un Unexpected Status Code or Return Value vulnerability in the kernel can cause a DoS when certain USB devices are plugged into the routing-engine (RE). An unauthenticated attacker with physical access can crash the kernel, forcing reboots and ...

CVE-2023-44178

CVE-2023-44178 describes a stack-based buffer overflow in the CLI command processing of Juniper Networks Junos OS. A low-privilege attacker can trigger the overflow by executing specific CLI commands, resulting in a Denial of Service (DoS); repeated actions cause a sustained DoS. Affected Junos O...

CVE-2024-39526

CVE-2024-39526 affects Junos OS on MX Series (MPC10/MPC11/LC9600), EX9200 (EX9200-15C), MX304, and Junos OS Evolved on PTX Series. The issue is an improper handling of exceptional conditions in DHCP packet processing; when DHCP snooping is enabled, malformed DHCP packets can cause ingress process...

CVE-2023-28965

CVE-2023-28965 targets Juniper Networks Junos OS on QFX10002, caused by an improper check/handling in the storm control feature. A high rate of traffic can trigger a sustained DoS as storm control drops packets when thresholds are exceeded. Affected versions include: 19.3R3-S7 and earlier; 19.4R3...

CVE-2026-33779

The CVE concerns Junos OS on SRX Series failing to properly verify the server certificate when provisioning to Security Director cloud, enabling a PITM to intercept traffic and access credentials and sensitive data. Affected Junos OS versions include all before 22.4R3-S9, 23.2 before 23.2R2-S6, 2...

CVE-2023-36840

Summary (CVE-2023-36840) A reachable-assertion vulnerability in Juniper’s Routing Protocol Daemon (RPD) on Junos OS and Junos OS Evolved can be exploited by a locally authenticated, low-privilege user when running a specific L2VPN command to cause a DoS (RPD crash/restart). Affected products/vers...

CVE-2024-21607

Concrete details available: Juniper Junos OS on MX Series and EX9200 Series is affected by CVE-2024-21607 due to a kernel-filter payload-protocol handling issue in IPv6 firewall filters. The root cause is that the payload-protocol match is not supported in the kernel filter, causing terms to acce...

CVE-2024-47507

CVE-2024-47507 affects Junos OS and Junos OS Evolved. The issue is in the routing protocol daemon (rpd): when a BGP update carries an aggregator attribute with an ASN value of zero, rpd accepts and propagates it, causing potential integrity impacts on downstream peers. Affected versions include: ...

CVE-2025-52960

CVE-2025-52960 affects Juniper Networks Junos OS on SRX Series and MX Series, caused by a Buffer Copy without Checking Size in the SIP ALG (flowd/mspmand). The underlying issue occurs when memory utilization is high and specific SIP packets arrive, crashing the flowd process and causing a DoS; th...

CVE-2024-47501

CVE-2024-47501 involves a NULL pointer dereference in the packet forwarding engine (pfe) of Juniper Networks Junos OS. A locally authenticated attacker with low privileges can trigger a DoS by executing specific show commands in VPLS or Junos Fusion, causing all FPCs hosting VPLS sessions or sate...

CVE-2025-6549

CVE-2025-6549 (Junos OS SRX, J-Web exposure) is an Incorrect Authorization vulnerability in the web server that can allow an unauthenticated, network-based attacker to reach the Juniper Web Device Manager (J-Web). It arises when Juniper Secure Connect (JSC) is enabled on specific interfaces or mu...

CVE-2023-36832

Summary: CVE-2023-36832 is an Improper Handling of Exceptional Conditions in Junos OS on MX Series, where unauthenticated attackers can send packets to the AMS interface to crash the PFE and cause DoS. Affected products/versions (MX Series Junos OS): all prior to 19.1R3-S10; 19.2 prior to 19.2R3-...

CVE-2025-52958

Summary of CVE-2025-52958 : A Reachable Assertion in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved can cause an adjacent, unauthenticated attacker to trigger a DoS. The issue occurs when route validation is enabled and a rare condition during BGP initial sess...

CVE-2023-44192

CVE-2023-44192 : In Juniper Networks Junos OS QFX5000 Series, the vulnerability affects the Packet Forwarding Engine where improper input validation enables an unauthenticated, network-based attacker to trigger a DMA memory leak, causing a DoS. The issue is observed when pseudo-VTEP is configured...

CVE-2024-39536

CVE-2024-39536 concerns Juniper Networks Junos OS and Junos OS Evolved. A Missing Release of Memory after Effective Lifetime vulnerability in the Periodic Packet Management Daemon (ppmd) allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS). The leak is triggered when a B...

CVE-2024-47493

CVE-2024-47493 affects Junos OS on MX Series with Trio-based FPCs. The vulnerability is a Missing Release of Memory after Effective Lifetime in the PFE, causing a heap memory leak during channelized MIC interface flap activity and potentially leading to DoS for unauthenticated adjacent attackers....

CVE-2026-21916

CVE-2026-21916 is a local privilege-escalation vulnerability in Juniper Networks Junos OS CLI via UNIX Symlink Following. It permits a low-privilege, authenticated attacker to escalate to root after performing a specific file link CLI operation and later when another user commits unrelated config...

CVE-2026-57054

CVE-2026-57054 describes a Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series. The issue allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreacha...

CVE-2026-57024

The CVE-2026-57024 entry concerns Juniper Junos OS on MX-SPC3 and SRX Series devices, where the iked process can crash under a high volume of VPN negotiation failures. According to the connected documents, repeated VPN failures cause a peer index rollover, leading to new peers being assigned indi...

CVE-2025-60011

CVE-2025-60011 describes an improper check for unusual or exceptional conditions in Juniper Junos OS and Junos OS Evolved rpd, enabling an unauthenticated, network-based attacker to cause availability impact on downstream devices. When a device receives a specific optional transitive BGP attribut...

CVE-2026-33775

CVE-2026-33775 describes a memory leak (Missing Release of Memory after Effective Lifetime) in Juniper Junos OS MX Series bbe-smgd that can be triggered by a mismatch between configured and received packet types. An adjacent, unauthenticated attacker may cause a DoS by exhausting heap memory, aft...

CVE-2024-47499

CVE-2024-47499 affects Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated, network-based attacker can trigger a DoS by sending a malformed AS PATH attribute over an established BGP session in BMP rib-in pre-policy monitoring, causing the RPD to crash and restart. The issue affects...

CVE-2026-33774

CVE-2026-33774 affects Junos OS on Juniper MX Series (MPC10/11, LC4800/LC9600 line cards and MX304). An improper check allows an unauthenticated, network-based attacker to bypass firewall filters applied to loopback interfaces lo0.n (n != 0) that are in the default routing instance, enabling pote...

CVE-2025-52988

The CVE-2025-52988 issue is a local OS command injection in the CLI of Juniper Networks Junos OS and Junos OS Evolved. The underlying flaw allows a high-privilege attacker to execute commands as root when crafting arguments to the command 'request system logout', enabling complete device compromi...

CVE-2026-33780

CVE-2026-33780 concerns a memory leak in Juniper Networks’ l2ald within Junos OS and Junos OS Evolved that is triggered by churn of EVPN-MPLS ESI routes learned from remote multi-homed PE devices. The issue stems from a memory management logic flaw where memory allocated for ESI routes is not rel...

CVE-2026-33791

CVE-2026-33791 affects Junos OS and Junos OS Evolved. The vulnerability lies in the CLI processing of certain crafted set system commands, where arguments are not properly sanitized, enabling an attacker with local, high privileges to inject arbitrary shell commands that execute as root. This can...

CVE-2025-52982

Juniper Junos OS MX Series with MS-MPC SIP ALG is affected. When two or more SIP-processing service sets run, an improper resource shutdown can cause the MS-MPC to crash and restart, enabling unauthenticated network-based DoS. Affected versions: all before 21.2R3-S9; 21.4 from 21.4R1; 22.2 before...

CVE-2026-21910

CVE-2026-21910 affects Junos OS on EX4k Series and QFX5k Series with EVPN-VXLAN LAG/VPLAG. An unauthenticated, network-adjacent attacker can trigger a link flap, which in configurations with multiple load-balanced next-hops can cause Inter-VNI traffic to drop, resulting in DoS. Recovery requires ...

CVE-2026-33778

CVE-2026-33778 affects Junos OS on SRX Series and MX Series. The vulnerability is in the IPsec library used by kmd/iked, where processing a specifically malformed first ISAKMP packet can cause the kmd/iked process to crash and restart. This results in a momentary inability to establish new securi...

CVE-2026-33793

CVE-2026-33793 describes an Execution with Unnecessary Privileges in the Junos OS/Junos OS Evolved UI. If a device has a configuration that allows unsigned Python op scripts, a non-root user can run malicious op scripts and escalate to root-equivalent privileges, compromising the system. Affected...

CVE-2026-57019

CVE-2026-57019 affects Junos OS on MX Series. An issue in the Packet Forwarding Engine (pfe) due to improper validation of a specified quantity in input can allow an unauthenticated adjacent attacker to cause a Denial-of-Service by triggering an FPC major error and a reset, impacting traffic unti...

CVE-2026-57025

CVE-2026-57025 affects Juniper Junos OS and Junos OS Evolved. The vulnerability is a Return of Pointer Value Outside of Expected Range in the fileio library that enables a local, low-privileged attacker to trigger a Denial-of-Service. On EX Series, QFX Series and MX Series, issuing a specific 'sh...

CVE-2026-21914

CVE-2026-21914 describes an Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series. A specially crafted GTP Modify Bearer Request can cause a lock to be acquired and never released, preventing other threads from acquiring it, triggering a watchdog timeout and ...

CVE-2025-52953

CVE-2025-52953 affects Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can send a valid BGP UPDATE, causing a BGP session reset and a sustained DoS. Affected releases include: Junos OS before 21.2R3-S9; 21.4 before 21.4R3-S11; 22.2 before 22.2R3-S7; 22.4 befor...

CVE-2025-52955

CVE-2025-52955 describes an Incorrect Calculation of Buffer Size in Juniper Networks Junos OS and Junos OS Evolved rpd when jflow/sflow updates are sent as a routing instance’s logical interface flaps. The issue can cause memory corruption, leading to an rpd crash and restart, with sustained DoS ...

CVE-2025-52983

CVE-2025-52983 describes a UI discrepancy in Junos OS on VM Host systems (VM Host Routing Engines) that allows a network-based, unauthenticated attacker to access the device. On REs, even after removing the public key for root login, users with the corresponding private key can still log in as ro...