Juniper Networks Junos OS
822 CVEs affecting Juniper Networks Junos OS. Latest disclosed: 2026-10-14. Critical: 38, High: 378.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-0248 | Critical | 10.0 | 2021-04-22 | This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker t… |
CVE-2021-0211 | Critical | 10.0 | 2021-01-15 | An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attac… |
CVE-2017-2343 | Critical | 10.0 | 2017-07-17 | The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of… |
CVE-2017-2349 | Critical | 9.9 | 2017-07-17 | A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the devi… |
CVE-2026-101983 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker t… |
CVE-2026-101982 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVP… |
CVE-2026-101954 | Critical | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved a… |
CVE-2026-33796 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external… |
CVE-2026-33792 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to exec… |
CVE-2026-33789 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BG… |
CVE-2026-102182 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execut… |
CVE-2026-102178 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer t… |
CVE-2026-102175 | Critical | 9.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthentica… |
CVE-2026-101990 | Critical | 9.8 | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured B… |
CVE-2026-101986 | Critical | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web… |
CVE-2026-101980 | Critical | 9.8 | 2026-10-14 | An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker t… |
CVE-2026-101956 | Critical | 9.8 | 2026-10-14 | An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execut… |
CVE-2026-101950 | Critical | 9.8 | 2026-10-14 | A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause… |
CVE-2024-21591 | Critical | 9.8 | 2024-01-12 | An Out-of-bounds Write vulnerability in J-Web of Juniper Networks Junos OS on SRX Series and EX Series allows an unauthenticated, network-based attacker to ca… |
CVE-2023-36845 | Critical | 9.8 | 2023-08-17 | A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-bas… |