High-severity CVEs (page 17)
Page 17 of 100 — high-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-101962 | High | 7.5 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved all… |
CVE-2026-101961 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP… |
CVE-2026-101952 | High | 7.5 | 2026-10-14 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows… |
CVE-2026-101949 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remot… |
CVE-2026-0322 | High | 7.2 | 2026-10-14 | A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network a… |
CVE-2026-92153 | High | 7.1 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink ha… |
CVE-2026-92151 | High | 7.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::Ccsds::SpaceP… |
CVE-2026-86565 | High | 8.2 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vh… |
CVE-2026-86563 | High | 7.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access. |
CVE-2026-86562 | High | 7.8 | 2026-10-14 | A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VD… |
CVE-2026-33798 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to… |
CVE-2026-33795 | High | 7.5 | 2026-10-14 | A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker… |
CVE-2026-19673 | High | 7.1 | 2026-10-14 | ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr. When t… |
CVE-2026-15102 | High | 7.5 | 2026-10-14 | ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized… |
CVE-2026-103994 | High | 8.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to c… |
CVE-2026-103946 | High | 8.3 | 2026-10-14 | An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus. |
CVE-2026-102185 | High | 7.5 | 2026-10-14 | A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved a… |
CVE-2026-102184 | High | 7.5 | 2026-10-14 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platfor… |
CVE-2026-102183 | High | 7.5 | 2026-10-14 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allo… |
CVE-2026-102180 | High | 7.5 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with acce… |
CVE-2026-102179 | High | 7.5 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a… |
CVE-2026-102177 | High | 7.6 | 2026-10-14 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated… |
CVE-2026-102176 | High | 8.8 | 2026-10-14 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauth… |
CVE-2026-102174 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote… |
CVE-2026-102084 | High | 8.1 | 2026-10-14 | An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, ne… |
CVE-2026-102081 | High | 7.5 | 2026-10-14 | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an u… |
CVE-2026-102079 | High | 7.8 | 2026-10-14 | An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. … |
CVE-2026-102070 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-ba… |
CVE-2026-102069 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an ad… |
CVE-2026-102068 | High | 7.5 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel pa… |
CVE-2026-102065 | High | 7.5 | 2026-10-14 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allo… |
CVE-2026-102064 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd cras… |
CVE-2026-102062 | High | 8.1 | 2026-10-14 | An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-bas… |
CVE-2026-102061 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticate… |
CVE-2026-102059 | High | 8.8 | 2026-10-14 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks… |
CVE-2026-102057 | High | 7.5 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of… |
CVE-2026-102056 | High | 7.1 | 2026-10-14 | An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent-network attacker t… |
CVE-2026-102055 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows a… |
CVE-2026-102052 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticate… |
CVE-2026-102050 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker t… |
CVE-2026-102049 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker… |
CVE-2026-102046 | High | 7.5 | 2026-10-14 | A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated networ… |
CVE-2026-102044 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of s… |
CVE-2026-102037 | High | 8.1 | 2026-10-14 | An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated netw… |
CVE-2026-102036 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cau… |
CVE-2026-102030 | High | 7.5 | 2026-10-14 | An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of… |
CVE-2026-102029 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated confi… |
CVE-2026-102028 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cau… |
CVE-2026-102027 | High | 7.5 | 2026-10-14 | An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configure… |
CVE-2026-102026 | High | 7.5 | 2026-10-14 | An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved all… |
CVE-2026-102025 | High | 7.5 | 2026-10-14 | A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an… |
CVE-2026-102024 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer… |
CVE-2026-102023 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via… |
CVE-2026-102022 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a… |
CVE-2026-102020 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to caus… |
CVE-2026-102016 | High | 7.5 | 2026-10-14 | An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BG… |
CVE-2026-102015 | High | 8.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent… |
CVE-2026-102014 | High | 8.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server t… |
CVE-2026-102012 | High | 7.5 | 2026-10-14 | A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of… |
CVE-2026-101997 | High | 8.1 | 2026-10-14 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows… |
CVE-2026-101994 | High | 7.1 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attack… |
CVE-2026-101978 | High | 8.8 | 2026-10-14 | An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated… |
CVE-2026-101977 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer t… |
CVE-2026-101973 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of serv… |
CVE-2026-101967 | High | 8.8 | 2026-10-14 | An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on t… |
CVE-2026-101966 | High | 8.2 | 2026-10-14 | A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to… |
CVE-2026-101965 | High | 8.8 | 2026-10-14 | An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to… |
CVE-2026-101957 | High | 7.5 | 2026-10-14 | An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cau… |
CVE-2026-101955 | High | 8.1 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to ca… |
CVE-2026-101951 | High | 7.5 | 2026-10-14 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows… |
CVE-2026-101948 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated… |
CVE-2026-101945 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an establish… |
CVE-2026-101944 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to ca… |
CVE-2026-101943 | High | 7.5 | 2026-10-14 | An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated net… |
CVE-2026-101942 | High | 7.5 | 2026-10-14 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evo… |
CVE-2026-101941 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbo… |
CVE-2026-101940 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP p… |
CVE-2026-101939 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sendin… |
CVE-2026-101927 | High | 7.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker t… |
CVE-2026-100236 | High | 8.6 | 2026-10-14 | A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first s… |
CVE-2016-15060 | High | 8.3 | 2026-10-14 | A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in… |
CVE-2026-91882 | High | 8.6 | 2026-10-14 | Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vuln… |
CVE-2026-91159 | High | 7.7 | 2026-10-14 | Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, oEmbed processing treated an entire attacker-controlled H… |
CVE-2026-91157 | High | 7.5 | 2026-10-14 | Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, sites with secure uploads enabled did not reconcile exist… |
CVE-2026-91156 | High | 7.5 | 2026-10-14 | Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, MessageBus audience calculation could deliver messages fr… |
CVE-2026-89077 | High | 7.5 | 2026-10-14 | Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025… |
CVE-2026-89076 | High | 7.2 | 2026-10-14 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This i… |
CVE-2026-89075 | High | 7.3 | 2026-10-14 | Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 bef… |
CVE-2026-89074 | High | 7.5 | 2026-10-14 | Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before… |
CVE-2026-89073 | High | 7.5 | 2026-10-14 | Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0… |
CVE-2026-89072 | High | 7.5 | 2026-10-14 | Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2… |
CVE-2026-89071 | High | 7.5 | 2026-10-14 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affec… |
CVE-2026-89070 | High | 7.5 | 2026-10-14 | Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from… |
CVE-2026-89069 | High | 8.0 | 2026-10-14 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue aff… |
CVE-2026-89068 | High | 8.1 | 2026-10-14 | Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from… |
CVE-2026-89067 | High | 8.8 | 2026-10-14 | Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and fr… |
CVE-2026-87093 | High | 8.8 | 2026-10-14 | Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from… |
CVE-2026-53615 | High | 8.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-… |
CVE-2026-53614 | High | 7.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-… |
CVE-2026-110719 | High | 7.2 | 2026-10-14 | Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docke… |