Vulnerabilities

Juniper Junos 24.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

82CVEs

CVE-2026-57032

Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.004

CVE-2024-47503

Junos OS: SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash

Published 2024-10-11 · Analyzed

7.1EPSS 0.003

CVE-2026-33775

Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

Published 2026-04-09 · Analyzed

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-33780

Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald

Published 2026-04-09 · Analyzed

7.1EPSS 0.003

CVE-2025-52949

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2026-33800

Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57019

Junos OS: MX Series: Specific traffic causes an FPC to reset

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57020

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57027

Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-0203

Junos OS: Receipt of a specifically malformed ICMP packet causes an FPC restart

Published 2026-01-15 · Modified

7.1EPSS 0.003

CVE-2025-52955

Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-30646

Junos OS and Junos OS Evolved: Receipt of a malformed LLDP TLV results in l2cpd crash

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-30647

Junos OS: MX Series: Subscriber login/logout activity will lead to a memory leak

Published 2025-04-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21600

Junos OS and Junos OS Evolved: With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2025-21602

Junos OS and Junos OS Evolved: Receipt of specially crafted BGP update packet causes RPD crash

Published 2025-01-09 · Analyzed

7.1EPSS 0.002

CVE-2026-21919

Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2026-57021

Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

Published 2026-07-09 · Analyzed

6.9EPSS 0.005

CVE-2025-60011

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Published 2026-01-15 · Analyzed

6.9EPSS 0.005

CVE-2026-57024

Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2026-57054

Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2025-52951

Junos OS: IPv6 firewall filter fails to match payload-protocol

Published 2025-07-11 · Analyzed

6.9EPSS 0.003

CVE-2026-33773

Junos OS: EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2026-33774

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2025-6549

Junos OS: SRX Series: J-Web can be exposed on additional interfaces

Published 2025-07-11 · Analyzed

6.9EPSS 0.002

CVE-2025-30652

Junos OS and Junos OS Evolved: Executing a specific CLI command when asregex-optimized is configured causes an rpd crash

Published 2025-04-09 · Analyzed

6.8EPSS 0.002

CVE-2025-59959

Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-60007

Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash

Published 2026-01-15 · Modified

6.8EPSS 0.001

CVE-2026-57025

Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

Published 2026-07-09 · Modified

6.8EPSS 0.001

CVE-2025-52963

Junos OS: A low-privileged user can disable an interface

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2026-33787

Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes

Published 2026-04-09 · Analyzed

6.8EPSS 0.001

CVE-2025-59961

Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2026-33776

Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information

Published 2026-04-09 · Analyzed

6.8EPSS 0.001

CVE-2026-33802

Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command

Published 2026-07-09 · Analyzed

6.8EPSS 0.001

CVE-2025-52989

Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2025-52986

Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks

Published 2025-07-11 · Analyzed

6.8EPSS 0.001

CVE-2026-21912

Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

CVE-2025-21590

Junos OS: An local attacker with shell access can execute arbitrary code

Published 2025-03-12 · Analyzed

6.7KEVEPSS 0.017

CVE-2025-52958

Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash

Published 2025-07-11 · Analyzed

6.0EPSS 0.002

Juniper Junos 24.2

Security check