Log in Start free

Juniper Networks

Products

ProductCVEsExploitedLatest
Junos OS6907Oct 14, 2026
Junos OS Evolved375–Oct 14, 2026
Junos Space32–Apr 9, 2026
Session Smart Router18–Oct 28, 2026
Session Smart Conductor12–Oct 28, 2026
Paragon Active Assurance5–Apr 12, 2024
MIST Cloud UI3–Oct 16, 2020
SRC Series3–Oct 19, 2021
Junos Space Security Director2–Oct 9, 2025
Contrail Service Orchestration2–Apr 14, 2022
JSI LWC2–Apr 9, 2026
Juniper Networks NFX Series Network Services Platform1–Apr 8, 2020
Juniper Security Director1–Jul 11, 2025
Junos1–Apr 12, 2024
Paragon Active Assurance (Formerly Netrounds)1–Oct 18, 2022
Paragon Automation (Pathfinder, Planner, Insights)1–Jan 15, 2026
SBR Carrier1–Jul 15, 2021
Security Director Policy Enforcer1–Oct 9, 2025
WAN Assurance Managed Router1–Jan 27, 2026
128 Technology Session Smart Router1–Oct 19, 2021
WAN Assurance Router1–Jun 27, 2024
AppID Service Sigpack1–Apr 17, 2023
Apstra1–Apr 9, 2026
Contrail Cloud1–Jul 15, 2021
Contrail Insights1–Apr 22, 2021
Contrail Networking1–Jan 15, 2021
CTP OS1–Apr 9, 2026
CTPView1–Oct 19, 2021
JATP1–Apr 8, 2020
JDPI-Decoder Engine1–Apr 17, 2023
Juniper Identity Management Service (JIMS)1–Apr 14, 2022

Exploited and recent CVEs

  • CVE-2025-21590 Medium 4.4 Exploited Junos OS: An local attacker with shell access can execute arbitrary code 1.7%
  • CVE-2023-36851 Medium 5.3 Exploited Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files 1.1%
  • CVE-2023-36846 Medium 5.3 Exploited Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files 93.5%
  • CVE-2023-36845 Critical 9.8 Exploited Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable 95.1%
  • CVE-2023-36844 Medium 5.3 Exploited Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables 90.0%
  • CVE-2023-36847 Medium 5.3 Exploited Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files 83.5%
  • CVE-2020-1631 High 8.8 Exploited Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services 4.9%
  • CVE-2026-106079 High 8.8 Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration 1.2%
  • CVE-2026-106079 High 8.8 Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration 1.2%
  • CVE-2026-103411 High 7.1 Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing 0.2%
  • CVE-2026-103410 High 7.5 Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection 0.3%
  • CVE-2026-103409 Critical 9.8 Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed 0.3%
  • CVE-2026-103408 High 8.8 Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options 0.3%
  • CVE-2026-103407 High 8.8 Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management 0.2%
  • CVE-2026-103407 High 8.8 Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management 0.2%
  • CVE-2026-103406 Critical 9.8 Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. 0.5%
  • CVE-2026-103405 Medium 5.8 Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting 0.2%
  • CVE-2026-103405 Medium 5.8 Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting 0.2%
  • CVE-2026-103404 Medium 6.8 Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials 0.2%
  • CVE-2026-103403 High 8.8 Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules 1.2%
  • CVE-2026-103403 High 8.8 Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules 1.2%
  • CVE-2026-103402 High 8.8 Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation 0.2%
  • CVE-2026-103402 High 8.8 Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation 0.2%
  • CVE-2026-103401 High 8.8 Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root 0.3%
  • CVE-2026-103401 High 8.8 Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root 0.3%
  • CVE-2026-103400 Medium 5.5 Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup 0.2%
  • CVE-2026-103400 Medium 5.5 Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup 0.2%
  • CVE-2026-103394 Low 3.7 Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates. 0.3%
  • CVE-2026-103393 Medium 4.3 Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing 0.2%
  • CVE-2026-103392 Medium 4.8 Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled 0.2%