CVE-2026-101937Medium 6.5Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used0.2%
CVE-2026-101936Medium 6.5Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled0.3%
CVE-2026-101934Medium 4.4Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd0.2%
CVE-2026-101927High 7.8Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation0.1%
CVE-2026-101984Medium 6.5Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured0.3%
CVE-2026-101987Medium 6.5Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used0.3%
CVE-2026-101988Medium 6.5Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled0.3%
CVE-2026-101989Medium 6.5Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled0.3%
CVE-2026-101990Critical 9.8Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised0.6%
CVE-2026-101992Medium 6.5Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used0.3%
CVE-2026-101993Medium 6.5Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used0.3%
CVE-2026-101994High 7.1Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash0.3%
CVE-2026-101996Medium 6.5Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured0.3%
CVE-2026-102064High 7.5Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used0.4%
CVE-2026-102066Medium 6.5Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled0.3%
CVE-2026-102071Medium 6.5Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled0.3%
CVE-2026-101950Critical 9.8Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled0.5%
CVE-2026-101955High 8.1Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used0.5%
CVE-2026-101997High 8.1Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication0.4%
CVE-2026-102062High 8.1Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used0.4%
CVE-2026-102078Medium 5.9Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash0.3%
CVE-2026-102079High 7.8Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection0.7%
CVE-2026-102080Medium 5.3Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover0.2%
CVE-2026-102081High 7.5Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic0.4%
CVE-2026-102082Medium 5.9Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs0.3%
CVE-2026-102083Medium 5.9Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash0.3%
CVE-2026-102084High 8.1Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution0.5%
CVE-2026-102086Medium 5.9Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash0.4%
CVE-2026-102087Medium 6.5Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes0.3%
CVE-2026-103993Medium 6.8Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes0.2%
CVE-2026-101991Low 3.1Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled0.2%
CVE-2026-101986Critical 9.8Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution0.5%
CVE-2026-101951High 7.5Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised0.4%
CVE-2026-101957High 7.5Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used0.5%
CVE-2026-102065High 7.5Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled0.5%
CVE-2026-101974Medium 6.5Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used0.3%
CVE-2026-102067Medium 6.5Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used0.3%
CVE-2026-101995Medium 4.3Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption0.2%
CVE-2026-101948High 7.5Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used0.5%
CVE-2026-101977High 7.5Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used0.5%
CVE-2026-101956Critical 9.8Junos OS: Unauthorized root command execution when J-Web is enabled0.8%
CVE-2026-101980Critical 9.8Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled0.5%
CVE-2026-102069High 8.8Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled0.4%
CVE-2026-102070High 7.5Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used0.5%
CVE-2026-101973High 7.5Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used0.4%
CVE-2026-102072Medium 6.5Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled0.4%
CVE-2026-103994High 8.8Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution0.4%
CVE-2026-102063Medium 6.5Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used0.3%