CVE-2026-102071Medium 6.5Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled0.3%
CVE-2026-102085Medium 6.5Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker0.3%
CVE-2026-102087Medium 6.5Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes0.3%
CVE-2026-103993Medium 6.8Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes0.2%
CVE-2026-101991Low 3.1Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled0.2%
CVE-2026-101986Critical 9.8Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution0.5%
CVE-2026-101951High 7.5Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised0.4%
CVE-2026-101957High 7.5Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used0.5%
CVE-2026-102065High 7.5Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled0.5%
CVE-2026-101974Medium 6.5Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used0.3%
CVE-2026-102067Medium 6.5Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used0.3%
CVE-2026-101995Medium 4.3Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption0.2%
CVE-2026-101948High 7.5Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used0.5%
CVE-2026-101977High 7.5Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used0.5%
CVE-2026-101965High 8.8Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled0.6%
CVE-2026-101967High 8.8Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used3.9%
CVE-2026-102068High 7.5Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used0.7%
CVE-2026-101960Medium 6.5Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled0.3%
CVE-2026-101978High 8.8Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used3.9%
CVE-2026-101985Medium 6.5Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled0.3%
CVE-2026-101966High 8.2Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service0.4%
CVE-2026-57029Medium 5.3Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash0.2%
CVE-2026-57028High 7.3Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker0.3%
CVE-2026-57025Medium 5.5Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash0.1%
CVE-2026-33803Medium 6.5Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker0.4%
CVE-2026-33801Medium 6.5Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes0.3%
CVE-2026-33799Medium 4.3Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash0.4%
CVE-2026-33794Medium 5.9Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash0.4%
CVE-2026-21901Medium 4.4Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash0.2%
CVE-2026-33791Medium 6.7Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root0.7%
CVE-2026-33783Medium 6.5Junos OS Evolved: PTX Series: If SRTE tunnels provisioned via PCEP are present and specific gRPC queries are received evo-aftmand crashes0.2%
CVE-2026-33776Medium 5.5Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information<0.1%
CVE-2026-33797High 7.4Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset0.2%
CVE-2026-33780Medium 6.5Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald0.2%
CVE-2026-33788High 7.8Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs0.1%
CVE-2026-21919Medium 6.5Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability0.2%
CVE-2025-59969Medium 6.5Junos OS Evolved: QFX5000 Series and PTX Series: An attacker sending crafted multicast packets will cause evo-aftmand / evo-pfemand to crash and restart0.2%
CVE-2026-33793High 7.8Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system0.2%
CVE-2026-21902Critical 9.8Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root18.5%
CVE-2026-21921Medium 6.5Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash0.4%
CVE-2026-21911Medium 6.5Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop0.2%
CVE-2026-21909Medium 6.5Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash0.2%
CVE-2026-21908High 7.1Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process0.3%
CVE-2025-60011Medium 5.8Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap0.5%
CVE-2025-60003High 7.5Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash0.4%
CVE-2025-59961Medium 5.5Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable0.1%
CVE-2025-59960High 7.4Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server0.3%
CVE-2025-59959Medium 5.5Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash0.1%
CVE-2025-60010Medium 5.4Junos OS and Junos OS Evolved: Device allows login for user with expired password0.2%
CVE-2025-60006Medium 5.3Junos OS Evolved: OS command injection vulnerabilities fixed1.0%