Juniper Networks

915 CVEs across 50 Juniper Networks products. Browse Juniper Networks vulnerabilities, severities, and proof-of-concept exploits.

Juniper Networks products with known CVEs

ProductCVEs
Junos OS681
Junos OS Evolved254
Junos Space49
Northstar Controller Application19
Juniper Atp12
Screenos7
Contrail Service Orchestration5
Paragon Active Assurance5
Junos Space Security Director3
Mist Cloud Ui3
Src Series3
Contrail2
Jsi Lwc2
Sbr Carrier2
Session Smart Conductor2
Session Smart Router2
128 Technology Session Smart Router1
Appformix1
Appid Service Sigpack1
Apstra1
Contrail Cloud1
Contrail Insights1
Contrail Networking1
Ctp OS1
Ctpview1
Jatp1
Jdpi-Decoder Engine1
Juniper Identity Management Service1
Juniper Identity Management Service (Jims)1
Juniper Networks Nfx Series Network Services Platform1
Juniper Security Director1
Junos1
Junose1
Junos OS On Ex Series Ethernet Switches With Ipv6 Enabled1
Junos OS On M/mx Platforms Where Enhanced Subscriber Management For Dhcpv6 Subscribers Is Configured1
Junos OS On Srx Series Services Gateways Chassis Cluster1
Junos OS Running On Qfx3500, Qfx3600, Qfx5100, Qfx5200, Ex4300, Ex4600 Devices1
Junos OS Where Rip Is Enabled1
Junos OS Where The Bgp Add-Path Feature Is Enabled With 'Send' Option Or With Both 'Send' And 'Receive' Options1
Junos OS With Bgp Enabled1
Junos OS With Dhcpv6 Enabled1
Junos OS With Ldp Enabled1
Junos Snapshot Administrator (Jsnapy)1
Paragon Active Assurance (Formerly Netrounds)1
Paragon Automation (Pathfinder, Planner, Insights)1
Security Director Policy Enforcer1
Service Insight1
Service Now1
Wan Assurance Managed Router1
Wan Assurance Router1
Juniper Networks CVEs — newest first (page 1 of 10)
CVESeverityScorePublishedSummary
CVE-2026-57054Medium5.82026-07-09A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated…
CVE-2026-57032Medium6.52026-07-09An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an au…
CVE-2026-57031Medium4.72026-07-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows ad…
CVE-2026-57030Medium5.92026-07-09A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Ne…
CVE-2026-57029Medium5.32026-07-09A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated at…
CVE-2026-57028High7.32026-07-09An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-ba…
CVE-2026-57027Medium6.52026-07-09A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series dev…
CVE-2026-57026High7.52026-07-09An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series all…
CVE-2026-57025Medium5.52026-07-09A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-p…
CVE-2026-57024Medium5.32026-07-09A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows…
CVE-2026-57023High7.52026-07-09An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series…
CVE-2026-57022Medium5.92026-07-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SR…
CVE-2026-57021Medium5.32026-07-09An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attac…
CVE-2026-57020Medium6.52026-07-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series all…
CVE-2026-57019Medium6.52026-07-09An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an u…
CVE-2026-33803Medium6.52026-07-09An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-ba…
CVE-2026-33802Medium5.52026-07-09A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service…
CVE-2026-33801Medium6.52026-07-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved al…
CVE-2026-33800Medium6.52026-07-09An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated…
CVE-2026-33799Medium4.32026-07-09An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacke…
CVE-2026-33794Medium5.92026-07-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved…
CVE-2026-21901Medium4.42026-07-09A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attac…
CVE-2026-33797High7.42026-04-09An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific g…
CVE-2026-33793High7.82026-04-09An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privile…
CVE-2026-33791Medium6.72026-04-09An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executin…
CVE-2026-33790High7.52026-04-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker…
CVE-2026-33788High7.82026-04-09A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows…
CVE-2026-33787Medium5.52026-04-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1500, SRX4100…
CVE-2026-33786Medium5.52026-04-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the chassis control daemon (chassisd) of Juniper Networks Junos OS on SRX1600, SRX2300…
CVE-2026-33785High8.82026-04-09A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute sp…
CVE-2026-33784Critical9.82026-04-09A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthenticated, netw…
CVE-2026-33783Medium6.52026-04-09A Function Call With Incorrect Argument Type vulnerability in the sensor interface of Juniper Networks Junos OS Evolved on PTX Series allows a network-based, a…
CVE-2026-33782Medium6.52026-04-09A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, u…
CVE-2026-33781Medium6.52026-04-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX and QFX…
CVE-2026-33780Medium6.52026-04-09A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evo…
CVE-2026-33779Medium6.52026-04-09An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the commun…
CVE-2026-33778High7.52026-04-09An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series an…
CVE-2026-33776Medium5.52026-04-09A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive in…
CVE-2026-33775Medium6.52026-04-09A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS o…
CVE-2026-33774Medium6.52026-04-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an…
CVE-2026-33773Medium5.82026-04-09An Incorrect Initialization of Resource vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series and QFX Series d…
CVE-2026-33771High7.42026-04-09A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacke…
CVE-2026-21919Medium6.52026-04-09An Incorrect Synchronization vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker wit…
CVE-2026-21916High7.32026-04-09A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to es…
CVE-2026-21915Medium6.72026-04-09A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows a local, hig…
CVE-2026-21904Medium6.12026-04-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59969Medium6.52026-04-09A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the advanced forwarding toolkit (evo-aftmand/evo-pfemand) of Juniper…
CVE-2025-13914High8.72026-04-09A Key Exchange without Entity Authentication vulnerability in the SSH implementation of Juniper Networks Apstra allows a unauthenticated, MITM attacker to im…
CVE-2025-30650Medium6.72026-04-08A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain acce…
CVE-2026-21902Critical9.82026-02-25An Incorrect Permission Assignment for Critical Resource vulnerability in the On-Box Anomaly detection framework of Juniper Networks Junos OS Evolved on PTX Se…
CVE-2025-21589Critical9.82026-01-27An Authentication Bypass Using an Alternate Path or Channel vulnerability in Juniper Networks Session Smart Router may allows a network-based attacker to bypas…
CVE-2026-21921Medium6.52026-01-15A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated…
CVE-2026-21920High7.52026-01-15An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause…
CVE-2026-21918High7.52026-01-15A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based at…
CVE-2026-21917High7.52026-01-15An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthe…
CVE-2026-21914High7.52026-01-15An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Den…
CVE-2026-21913High7.52026-01-15An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthentica…
CVE-2026-21912Medium5.52026-01-15A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of Juniper Networks Junos OS on MX1…
CVE-2026-21911Medium6.52026-01-15An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an unauthenticated networ…
CVE-2026-21910Medium6.52026-01-15An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX…
CVE-2026-21909Medium6.52026-01-15A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows a…
CVE-2026-21908High7.12026-01-15A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow a…
CVE-2026-21907Medium5.92026-01-15A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ss…
CVE-2026-21906High7.52026-01-15An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthe…
CVE-2026-21905High7.52026-01-15A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series an…
CVE-2026-21903Medium6.52026-01-15A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated w…
CVE-2026-0203Medium6.52026-01-15An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, network-adjacent atta…
CVE-2025-60011Medium5.82026-01-15An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al…
CVE-2025-60007Medium5.52026-01-15A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with lo…
CVE-2025-60003High7.52026-01-15A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-base…
CVE-2025-59961Medium5.52026-01-15An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved al…
CVE-2025-59960High7.42026-01-15An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved al…
CVE-2025-59959Medium5.52026-01-15An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authentic…
CVE-2025-52987Medium6.12026-01-15A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure t…
CVE-2025-60010Medium5.42025-10-09A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access…
CVE-2025-60009Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-60006Medium5.32025-10-09Multiple instances of an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the CLI of Juniper Netwo…
CVE-2025-60004High7.52025-10-09An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved al…
CVE-2025-60002Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-60001Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-60000Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59999Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59998Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59997Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59996Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59995Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59994Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59993Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59992Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59991Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59990Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59989Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59988Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59987Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59986Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59985Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59984Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59983Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59982Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…
CVE-2025-59981Medium6.12025-10-09An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Juniper Networks Junos Space allows an attacker to inj…