Juniper

297 CVEs across 433 Juniper products. Browse Juniper vulnerabilities, severities, and proof-of-concept exploits.

Juniper products with known CVEs

Product	CVEs
Junos	788
Junos Os Evolved	248
Srx5600	153
Srx5800	153
Srx5400	139
Srx1500	129
Srx4100	126
Srx4200	125
Srx300	124
Srx340	119
Srx345	119
Srx4600	119
Srx320	118
Srx550	109
Mx480	102
Mx960	102
Mx240	100
Srx110	94
Srx1400	94
Srx220	94
Srx3400	94
Srx3600	94
Srx100	93
Srx210	93
Srx650	93
Srx240	92
Srx380	92
Mx2010	90
Mx2020	88
Mx2008	87
Mx204	83
Junos Space	79
Mx10008	75
Qfx5200	67
Ex4600	65
Qfx5110	65
Mx10003	60
Mx104	60
Ex2300	59
Mx10	59
Mx40	59
Mx80	59
Ex3400	58
Mx150	58
Mx5	58
Srx550 Hm	58
Ex4300	57
Srx4000	54
Srx5000	52
Srx550m	50

Juniper CVEs — newest first (page 1 of 3)
CVE	Severity	Score	Published	Summary
`CVE-2026-57054`	Medium	`5.8`	2026-07-09	A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated…
`CVE-2026-57032`	Medium	`6.5`	2026-07-09	An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an au…
`CVE-2026-57030`	Medium	`5.9`	2026-07-09	A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Ne…
`CVE-2026-57029`	Medium	`5.3`	2026-07-09	A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated at…
`CVE-2026-57028`	High	`7.3`	2026-07-09	An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-ba…
`CVE-2026-57027`	Medium	`6.5`	2026-07-09	A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series dev…
`CVE-2026-57026`	High	`7.5`	2026-07-09	An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series all…
`CVE-2026-57025`	Medium	`5.5`	2026-07-09	A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-p…
`CVE-2026-57024`	Medium	`5.3`	2026-07-09	A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows…
`CVE-2026-57023`	High	`7.5`	2026-07-09	An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series…
`CVE-2026-57022`	Medium	`5.9`	2026-07-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SR…
`CVE-2026-57021`	Medium	`5.3`	2026-07-09	An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attac…
`CVE-2026-57020`	Medium	`6.5`	2026-07-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series all…
`CVE-2026-57019`	Medium	`6.5`	2026-07-09	An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an u…
`CVE-2026-33803`	Medium	`6.5`	2026-07-09	An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-ba…
`CVE-2026-33802`	Medium	`5.5`	2026-07-09	A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service…
`CVE-2026-33801`	Medium	`6.5`	2026-07-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved al…
`CVE-2026-33799`	Medium	`4.3`	2026-07-09	An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacke…
`CVE-2026-33794`	Medium	`5.9`	2026-07-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved…
`CVE-2026-33797`	High	`7.4`	2026-04-09	An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific g…
`CVE-2026-33793`	High	`7.8`	2026-04-09	An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privile…
`CVE-2026-33791`	Medium	`6.7`	2026-04-09	An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executin…
`CVE-2026-33790`	High	`7.5`	2026-04-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker…
`CVE-2026-33788`	High	`7.8`	2026-04-09	A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows…
`CVE-2026-33787`	Medium	`5.5`	2026-04-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100…
`CVE-2026-33786`	Medium	`5.5`	2026-04-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300…
`CVE-2026-33785`	High	`8.8`	2026-04-09	A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute sp…
`CVE-2026-33784`	Critical	`9.8`	2026-04-09	A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, netw…
`CVE-2026-33783`	Medium	`6.5`	2026-04-09	A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, a…
`CVE-2026-33782`	Medium	`6.5`	2026-04-09	A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, u…
`CVE-2026-33781`	Medium	`6.5`	2026-04-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX and QFX…
`CVE-2026-33780`	Medium	`6.5`	2026-04-09	A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evo…
`CVE-2026-33779`	Medium	`6.5`	2026-04-09	An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the commun…
`CVE-2026-33778`	High	`7.5`	2026-04-09	An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series an…
`CVE-2026-33776`	Medium	`5.5`	2026-04-09	A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive in…
`CVE-2026-33775`	Medium	`6.5`	2026-04-09	A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS o…
`CVE-2026-33774`	Medium	`6.5`	2026-04-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an…
`CVE-2026-33773`	Medium	`5.8`	2026-04-09	An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series and QFX Series d…
`CVE-2026-33771`	High	`7.4`	2026-04-09	A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacke…
`CVE-2026-21919`	Medium	`6.5`	2026-04-09	An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker wit…
`CVE-2026-21916`	High	`7.3`	2026-04-09	A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to es…
`CVE-2026-21915`	Medium	`6.7`	2026-04-09	A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, hig…
`CVE-2026-21904`	Medium	`6.1`	2026-04-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59969`	Medium	`6.5`	2026-04-09	A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper…
`CVE-2025-13914`	High	`8.7`	2026-04-09	A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to im…
`CVE-2026-21902`	Critical	`9.8`	2026-02-25	An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Se…
`CVE-2026-21921`	Medium	`6.5`	2026-01-15	A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated…
`CVE-2026-21920`	High	`7.5`	2026-01-15	An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause…
`CVE-2026-21918`	High	`7.5`	2026-01-15	A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based at…
`CVE-2026-21917`	High	`7.5`	2026-01-15	An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthe…
`CVE-2026-21914`	High	`7.5`	2026-01-15	An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Den…
`CVE-2026-21913`	High	`7.5`	2026-01-15	An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthentica…
`CVE-2026-21912`	Medium	`5.5`	2026-01-15	A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of Juniper Networks Junos OS on MX1…
`CVE-2026-21911`	Medium	`6.5`	2026-01-15	An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an unauthenticated networ…
`CVE-2026-21910`	Medium	`6.5`	2026-01-15	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX…
`CVE-2026-21909`	Medium	`6.5`	2026-01-15	A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows a…
`CVE-2026-21908`	High	`7.1`	2026-01-15	A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow a…
`CVE-2026-21907`	Medium	`5.9`	2026-01-15	A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ss…
`CVE-2026-21906`	High	`7.5`	2026-01-15	An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthe…
`CVE-2026-21905`	High	`7.5`	2026-01-15	A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series an…
`CVE-2026-21903`	Medium	`6.5`	2026-01-15	A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated w…
`CVE-2026-0203`	Medium	`6.5`	2026-01-15	An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, network-adjacent atta…
`CVE-2025-60011`	Medium	`5.8`	2026-01-15	An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al…
`CVE-2025-60007`	Medium	`5.5`	2026-01-15	A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with lo…
`CVE-2025-60003`	High	`7.5`	2026-01-15	A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-base…
`CVE-2025-59961`	Medium	`5.5`	2026-01-15	An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved al…
`CVE-2025-59960`	High	`7.4`	2026-01-15	An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved al…
`CVE-2025-59959`	Medium	`5.5`	2026-01-15	An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authentic…
`CVE-2025-52987`	Medium	`6.1`	2026-01-15	A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure t…
`CVE-2025-60010`	Medium	`5.4`	2025-10-09	A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access…
`CVE-2025-60009`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-60006`	Medium	`5.3`	2025-10-09	Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Netwo…
`CVE-2025-60004`	High	`7.5`	2025-10-09	An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al…
`CVE-2025-60002`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-60001`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-60000`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59999`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59998`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59997`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59996`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59995`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59994`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59993`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59992`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59991`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59990`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59989`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59988`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59987`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59986`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59985`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59984`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59983`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59982`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59981`	Medium	`6.1`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
`CVE-2025-59980`	Medium	`6.5`	2025-10-09	An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited r…
`CVE-2025-59978`	Critical	`9.0`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to sto…
`CVE-2025-59976`	Medium	`6.5`	2025-10-09	An arbitrary file download vulnerability in the web interface of Juniper Networks Junos Space allows a network-based authenticated attacker using a crafted GET…
`CVE-2025-59975`	High	`7.5`	2025-10-09	An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker…
`CVE-2025-59974`	High	`8.4`	2025-10-09	An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Junos Space Security Director allows an attacker to in…