<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Juniper Networks, Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/juniper" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Juniper Networks, Inc. (juniper).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/juniper.png</url>
      <title>Juniper Networks, Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-101954 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled</title>
      <link>https://vulnogram.org/CVE-2026-101954</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101954</guid>
      <description>An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:22:07 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101952 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled</title>
      <link>https://vulnogram.org/CVE-2026-101952</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101952</guid>
      <description>An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update wh…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:21:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101949 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash</title>
      <link>https://vulnogram.org/CVE-2026-101949</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101949</guid>
      <description>A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of service via a VPN-flowspec BGP update if it is readvert…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:20:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101964 · 7.1 HIGH — Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message</title>
      <link>https://vulnogram.org/CVE-2026-101964</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101964</guid>
      <description>A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet received over an established LDP session.</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 17:20:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101963 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used</title>
      <link>https://vulnogram.org/CVE-2026-101963</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101963</guid>
      <description>An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:19:56 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101962 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used</title>
      <link>https://vulnogram.org/CVE-2026-101962</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101962</guid>
      <description>An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempt…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:19:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101961 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy</title>
      <link>https://vulnogram.org/CVE-2026-101961</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101961</guid>
      <description>A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:19:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101959 · 7.1 HIGH — Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash</title>
      <link>https://vulnogram.org/CVE-2026-101959</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101959</guid>
      <description>A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically m…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 17:18:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101983 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured</title>
      <link>https://vulnogram.org/CVE-2026-101983</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101983</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:17:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101982 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used</title>
      <link>https://vulnogram.org/CVE-2026-101982</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101982</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via prot…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:17:16 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101981 · 8.8 HIGH — Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled</title>
      <link>https://vulnogram.org/CVE-2026-101981</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101981</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label M…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 17:16:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101979 · 8.8 HIGH — Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled</title>
      <link>https://vulnogram.org/CVE-2026-101979</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101979</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 17:16:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101976 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash</title>
      <link>https://vulnogram.org/CVE-2026-101976</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101976</guid>
      <description>An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability sending a specifically malformed BGP update to cause a D…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:16:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101975 · 7.1 HIGH — Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used</title>
      <link>https://vulnogram.org/CVE-2026-101975</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101975</guid>
      <description>A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-rout…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 17:15:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-101972 · 7.1 HIGH — Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled</title>
      <link>https://vulnogram.org/CVE-2026-101972</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-101972</guid>
      <description>An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via specific OSPFv2 packets sent on an OSP…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 17:15:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102077 · 8.7 HIGH 🌩️ — Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops</title>
      <link>https://vulnogram.org/CVE-2026-102077</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102077</guid>
      <description>An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On M…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 17:14:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-33798 · 8.8 HIGH — Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled</title>
      <link>https://vulnogram.org/CVE-2026-33798</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-33798</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:59:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-33796 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled</title>
      <link>https://vulnogram.org/CVE-2026-33796</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-33796</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:59:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-33795 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised</title>
      <link>https://vulnogram.org/CVE-2026-33795</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-33795</guid>
      <description>A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:59:11 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-33792 · 9.8 CRITICAL 🌩️ — Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured</title>
      <link>https://vulnogram.org/CVE-2026-33792</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-33792</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:58:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-33789 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service</title>
      <link>https://vulnogram.org/CVE-2026-33789</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-33789</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:58:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102185 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used</title>
      <link>https://vulnogram.org/CVE-2026-102185</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102185</guid>
      <description>A Loop with Unreachable Exit Condition (&apos;Infinite Loop&apos;) vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with pref…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:58:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102184 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash</title>
      <link>https://vulnogram.org/CVE-2026-102184</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102184</guid>
      <description>An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 struc…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:58:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102183 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes</title>
      <link>https://vulnogram.org/CVE-2026-102183</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102183</guid>
      <description>An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause an rpd crash via a specifically malformed NLRI.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:58:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102182 · 9.8 CRITICAL 🌩️ — Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution</title>
      <link>https://vulnogram.org/CVE-2026-102182</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102182</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets. This issue requires IKE to be en…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:57:50 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102180 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use</title>
      <link>https://vulnogram.org/CVE-2026-102180</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102180</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BG…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:57:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102179 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used</title>
      <link>https://vulnogram.org/CVE-2026-102179</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102179</guid>
      <description>An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when t…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:57:23 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102178 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise</title>
      <link>https://vulnogram.org/CVE-2026-102178</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102178</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:57:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102177 · 7.6 HIGH — Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used</title>
      <link>https://vulnogram.org/CVE-2026-102177</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102177</guid>
      <description>An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are c…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:56:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102176 · 8.8 HIGH — Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102176</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102176</guid>
      <description>A Buffer Copy without Checking Size of Input (&apos;Classic Buffer Overflow&apos;) vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:56:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102175 · 9.8 CRITICAL 🌩️ — Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used</title>
      <link>https://vulnogram.org/CVE-2026-102175</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102175</guid>
      <description>A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execu…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:56:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102174 · 8.8 HIGH — Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102174</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102174</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:56:11 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102061 · 8.8 HIGH — Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used</title>
      <link>https://vulnogram.org/CVE-2026-102061</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102061</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message. Thi…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:55:57 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102060 · 7.1 HIGH — Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used</title>
      <link>https://vulnogram.org/CVE-2026-102060</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102060</guid>
      <description>A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:55:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102059 · 8.8 HIGH — Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information</title>
      <link>https://vulnogram.org/CVE-2026-102059</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102059</guid>
      <description>An Improper Neutralization of Special Elements used in an OS Command (&apos;OS Command Injection&apos;) vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:55:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102058 · 7.1 HIGH — Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102058</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102058</guid>
      <description>A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic.</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:55:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102057 · 8.7 HIGH 🌩️ — Junos OS: An attacker causes DHCP service disruption during DHCP client operation</title>
      <link>https://vulnogram.org/CVE-2026-102057</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102057</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interr…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:55:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102056 · 7.1 HIGH — Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102056</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102056</guid>
      <description>An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent-network attacker to crash the daemon and disclose limited process memory via a specific CFM Message sent to a…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:54:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102055 · 8.8 HIGH — Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102055</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102055</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause deni…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:54:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102054 · 5.3 MEDIUM — Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured</title>
      <link>https://vulnogram.org/CVE-2026-102054</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102054</guid>
      <description>An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a lo…</description>
      <category>Medium</category>
      <pubDate>Wed, 14 Oct 2026 16:54:26 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102053 · 6.9 MEDIUM 🌩️ — Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used</title>
      <link>https://vulnogram.org/CVE-2026-102053</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102053</guid>
      <description>An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exha…</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:54:15 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102052 · 8.8 HIGH — Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used</title>
      <link>https://vulnogram.org/CVE-2026-102052</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102052</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:54:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102051 · 7.1 HIGH — Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102051</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102051</guid>
      <description>An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 contr…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:53:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102050 · 8.8 HIGH — Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102050</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102050</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received o…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:53:37 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102049 · 8.8 HIGH — Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102049</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102049</guid>
      <description>A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service or execute arbitrary code with root privileges via LLDP traffi…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:53:24 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102048 · 7.1 HIGH — Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled</title>
      <link>https://vulnogram.org/CVE-2026-102048</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102048</guid>
      <description>An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denial of service and l2cpd restart via FNP-enabled Layer 2 interfaces. The…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:53:12 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102047 · 7.1 HIGH — Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used</title>
      <link>https://vulnogram.org/CVE-2026-102047</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102047</guid>
      <description>An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control pro…</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:53:00 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102046 · 8.7 HIGH 🌩️ — Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used</title>
      <link>https://vulnogram.org/CVE-2026-102046</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102046</guid>
      <description>A Loop with Unreachable Exit Condition (&apos;Infinite Loop&apos;) vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a denial of service via crafted SCTP network traffic.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:52:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102045 · 7.1 HIGH — Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102045</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102045</guid>
      <description>An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.</description>
      <category>High</category>
      <pubDate>Wed, 14 Oct 2026 16:52:36 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-102044 · 8.7 HIGH 🌩️ — Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled</title>
      <link>https://vulnogram.org/CVE-2026-102044</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-102044</guid>
      <description>A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 14 Oct 2026 16:52:23 GMT</pubDate>
    </item>
  </channel>
</rss>
