Juniper Networks - vulnerabilities (CVEs)
1087 CVEs in 57 products, 171 in the last 30 days, newest from 2026-10-28.
Products
- Junos Os - 822 CVEs
- Junos Os Evolved - 375 CVEs
- Junos Space - 49 CVEs
- Northstar Controller Application - 19 CVEs
- Session Smart Router - 18 CVEs
- Juniper Atp - 12 CVEs
- Session Smart Conductor - 12 CVEs
- Screenos - 7 CVEs
- Contrail Service Orchestration - 5 CVEs
- Paragon Active Assurance - 5 CVEs
- Junos Space Security Director - 3 CVEs
- Mist Cloud Ui - 3 CVEs
- Src Series - 3 CVEs
- Contrail - 2 CVEs
- Jsi Lwc - 2 CVEs
- Sbr Carrier - 2 CVEs
- 128 Technology Session Smart Router - 1 CVEs
- Appformix - 1 CVEs
- Appid Service Sigpack - 1 CVEs
- Apstra - 1 CVEs
- Contrail Cloud - 1 CVEs
- Contrail Insights - 1 CVEs
- Contrail Networking - 1 CVEs
- Ctp Os - 1 CVEs
- Ctpview - 1 CVEs
- Ex4300 - 1 CVEs
- Ex4600 Devices - 1 CVEs
- Insights - 1 CVEs
- Jatp - 1 CVEs
- Jdpi-decoder Engine - 1 CVEs
- Juniper Identity Management Service - 1 CVEs
- Juniper Identity Management Service Jims - 1 CVEs
- Juniper Networks Nfx Series Network Services Platform - 1 CVEs
- Juniper Security Director - 1 CVEs
- Junos - 1 CVEs
- Junos Os On Ex Series Ethernet Switches With Ipv6 Enabled - 1 CVEs
- Junos Os On Mmx Platforms Where Enhanced Subscriber Management For Dhcpv6 Subscribers Is Configured - 1 CVEs
- Junos Os On Srx Series Services Gateways Chassis Cluster - 1 CVEs
- Junos Os Running On Qfx3500 - 1 CVEs
- Junos Os Where Rip Is Enabled - 1 CVEs
- Junos Os Where The Bgp Add-path Feature Is Enabled With Send Option Or With Both Send And Receive Options - 1 CVEs
- Junos Os With Bgp Enabled - 1 CVEs
- Junos Os With Dhcpv6 Enabled - 1 CVEs
- Junos Os With Ldp Enabled - 1 CVEs
- Junos Snapshot Administrator Jsnapy - 1 CVEs
- Junose - 1 CVEs
- Paragon Active Assurance Formerly Netrounds - 1 CVEs
- Paragon Automation Pathfinder - 1 CVEs
- Planner - 1 CVEs
- Qfx3600 - 1 CVEs
- Qfx5100 - 1 CVEs
- Qfx5200 - 1 CVEs
- Security Director Policy Enforcer - 1 CVEs
- Service Insight - 1 CVEs
- Service Now - 1 CVEs
- Wan Assurance Managed Router - 1 CVEs
- Wan Assurance Router - 1 CVEs
Newest CVEs of Juniper Networks
- CVE-2026-106079 - CVSS 8.8 (high), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart…
- CVE-2026-103411 - CVSS 7.1 (high), 2026-10-28: An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause…
- CVE-2026-103410 - CVSS 7.5 (high), 2026-10-28: An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a…
- CVE-2026-103409 - CVSS 9.8 (critical), 2026-10-28: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to…
- CVE-2026-103408 - CVSS 8.8 (high), 2026-10-28: A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to…
- CVE-2026-103407 - CVSS 8.8 (high), 2026-10-28: An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart…
- CVE-2026-103406 - CVSS 9.8 (critical), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor…
- CVE-2026-103405 - CVSS 5.8 (medium), 2026-10-28: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the web server in Juniper Networks…
- CVE-2026-103404 - CVSS 6.8 (medium), 2026-10-28: An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Smart Conductor allows a local user to…
- CVE-2026-103403 - CVSS 8.8 (high), 2026-10-28: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart…
- CVE-2026-103402 - CVSS 8.8 (high), 2026-10-28: An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an…
- CVE-2026-103401 - CVSS 8.8 (high), 2026-10-28: An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart…
- CVE-2026-103400 - CVSS 5.5 (medium), 2026-10-28: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in the ember service in Juniper Networks…
- CVE-2026-103394 - CVSS 3.7 (low), 2026-10-28: An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial…
- CVE-2026-103393 - CVSS 4.3 (medium), 2026-10-28: An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adjacent attacker to read stale memory…
- CVE-2026-103392 - CVSS 4.8 (medium), 2026-10-28: An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an attacker to corrupt TCP payload data and…
- CVE-2026-103391 - CVSS 5.3 (medium), 2026-10-28: An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router allows an attacker to corrupt forwarded…
- CVE-2026-103390 - CVSS 5.3 (medium), 2026-10-28: An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker to…
- CVE-2026-101954 - CVSS 9.8 (critical), 2026-10-14: An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved…
- CVE-2026-101952 - CVSS 8.7 (high), 2026-10-14: An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows…
- CVE-2026-101949 - CVSS 8.7 (high), 2026-10-14: A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated…
- CVE-2026-101964 - CVSS 7.1 (high), 2026-10-14: A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to…
- CVE-2026-101963 - CVSS 8.7 (high), 2026-10-14: An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to…
- CVE-2026-101962 - CVSS 8.7 (high), 2026-10-14: An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved…
- CVE-2026-101961 - CVSS 8.7 (high), 2026-10-14: A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP…
- CVE-2026-101959 - CVSS 7.1 (high), 2026-10-14: A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS…
- CVE-2026-101983 - CVSS 9.8 (critical), 2026-10-14: A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker…
- CVE-2026-101982 - CVSS 9.8 (critical), 2026-10-14: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured…
- CVE-2026-101981 - CVSS 8.8 (high), 2026-10-14: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated…
- CVE-2026-101979 - CVSS 8.8 (high), 2026-10-14: A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to…