CVE-2025-21590Medium 4.4ExploitedJunos OS: An local attacker with shell access can execute arbitrary code1.7%
CVE-2023-36851Medium 5.3ExploitedJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files1.1%
CVE-2023-36846Medium 5.3ExploitedJunos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files93.5%
CVE-2023-36845Critical 9.8ExploitedJunos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable95.1%
CVE-2023-36844Medium 5.3ExploitedJunos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables90.0%
CVE-2023-36847Medium 5.3ExploitedJunos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files83.5%
CVE-2020-1631High 8.8ExploitedOut of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services4.9%
CVE-2026-101954Critical 9.8Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled0.5%
CVE-2026-101952High 7.5Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled0.4%
CVE-2026-101949High 7.5Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash0.4%
CVE-2026-101964Medium 6.5Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message0.3%
CVE-2026-101963High 7.5Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used0.4%
CVE-2026-101962High 7.5Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used0.4%
CVE-2026-101961High 7.5Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy0.4%
CVE-2026-101959Medium 6.5Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash0.2%
CVE-2026-101983Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured0.5%
CVE-2026-101982Critical 9.8Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used0.6%
CVE-2026-101981High 8.8Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled0.2%
CVE-2026-101979High 8.8Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled0.4%
CVE-2026-101976High 7.5Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash0.5%
CVE-2026-101975Medium 6.5Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used0.2%
CVE-2026-101972Medium 6.5Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled0.3%
CVE-2026-102077High 7.5Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops0.3%
CVE-2026-33798High 8.8Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled0.4%
CVE-2026-33796Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled0.6%
CVE-2026-33795High 7.5Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised0.4%
CVE-2026-33792Critical 9.8Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured0.6%
CVE-2026-33789Critical 9.8Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service0.7%
CVE-2026-102185High 7.5Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used0.4%
CVE-2026-102184High 7.5Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash0.5%
CVE-2026-102183High 7.5Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes0.5%
CVE-2026-102182Critical 9.8Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution0.4%
CVE-2026-102180High 7.5Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use0.4%
CVE-2026-102179High 7.5Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used0.4%
CVE-2026-102178Critical 9.8Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise0.5%
CVE-2026-102177High 7.6Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used0.3%
CVE-2026-102176High 8.8Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled0.3%
CVE-2026-102175Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used0.7%
CVE-2026-102174High 8.8Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled0.6%
CVE-2026-102061High 8.8Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used0.3%
CVE-2026-102060Medium 6.5Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used0.3%
CVE-2026-102059High 8.8Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information3.9%
CVE-2026-102058Medium 6.5Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled0.3%
CVE-2026-102057High 7.5Junos OS: An attacker causes DHCP service disruption during DHCP client operation0.4%
CVE-2026-102056High 7.1Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled0.3%
CVE-2026-102055High 8.8Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled0.3%
CVE-2026-102054Medium 4.3Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured0.2%
CVE-2026-102053Medium 5.3Junos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used0.3%
CVE-2026-102052High 8.8Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used0.3%
CVE-2026-102051Medium 6.5Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled0.3%