Vulnerabilities

Juniper Junos 24.4

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

52CVEs

CVE-2026-33785

Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario

Published 2026-04-09 · Analyzed

8.8EPSS 0.001

CVE-2026-21906

Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.006

CVE-2026-21920

Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.005

CVE-2026-57026

Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash

Published 2026-07-09 · Analyzed

8.7EPSS 0.005

CVE-2026-57023

Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash

Published 2026-07-09 · Analyzed

8.7EPSS 0.005

CVE-2026-33778

Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes

Published 2026-04-09 · Analyzed

8.7EPSS 0.005

CVE-2026-33790

Junos OS: SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart.

Published 2026-04-09 · Analyzed

8.7EPSS 0.005

CVE-2025-60004

Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash

Published 2025-10-09 · Analyzed

8.7EPSS 0.004

CVE-2026-21905

Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2026-21917

Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2025-60003

Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2026-21913

Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart

Published 2026-01-15 · Analyzed

8.7EPSS 0.004

CVE-2025-59964

Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart

Published 2025-10-09 · Analyzed

8.7EPSS 0.004

CVE-2026-21914

Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash

Published 2026-01-15 · Analyzed

8.7EPSS 0.003

CVE-2025-30661

Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation

Published 2025-07-11 · Analyzed

8.5EPSS 0.002

CVE-2026-33793

Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system

Published 2026-04-09 · Analyzed

8.5EPSS 0.002

CVE-2026-33791

Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

Published 2026-04-09 · Modified

8.4EPSS 0.007

CVE-2026-33779

Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication

Published 2026-04-09 · Analyzed

8.3EPSS 0.002

CVE-2026-57030

Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS

Published 2026-07-09 · Analyzed

8.2EPSS 0.004

CVE-2026-21908

Junos OS and Junos OS Evolved: Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process

Published 2026-01-15 · Analyzed

7.5EPSS 0.003

CVE-2025-59960

Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server

Published 2026-01-15 · Analyzed

7.4EPSS 0.003

CVE-2026-21916

Junos OS: A low privileged user can escalate their privileges so that they can login as root

Published 2026-04-09 · Analyzed

7.3EPSS 0.001

CVE-2026-57032

Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.004

CVE-2026-33775

Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd

Published 2026-04-09 · Analyzed

7.1EPSS 0.003

CVE-2025-52953

Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2025-52949

Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash

Published 2025-07-11 · Analyzed

7.1EPSS 0.003

CVE-2026-21910

Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop

Published 2026-01-15 · Analyzed

7.1EPSS 0.003

CVE-2026-57019

Junos OS: MX Series: Specific traffic causes an FPC to reset

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-33781

Junos OS: EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed

Published 2026-04-09 · Analyzed

7.1EPSS 0.003

CVE-2026-33800

Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57027

Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-57020

Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

Published 2026-07-09 · Analyzed

7.1EPSS 0.003

CVE-2026-21919

Junos OS and Junos OS Evolved: A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability

Published 2026-04-09 · Analyzed

7.1EPSS 0.002

CVE-2026-57021

Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

Published 2026-07-09 · Analyzed

6.9EPSS 0.005

CVE-2025-60011

Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap

Published 2026-01-15 · Analyzed

6.9EPSS 0.005

CVE-2026-57024

Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2026-57054

Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

Published 2026-07-09 · Analyzed

6.9EPSS 0.004

CVE-2025-52951

Junos OS: IPv6 firewall filter fails to match payload-protocol

Published 2025-07-11 · Analyzed

6.9EPSS 0.003

CVE-2026-33774

Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect

Published 2026-04-09 · Analyzed

6.9EPSS 0.003

CVE-2025-59959

Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash

Published 2026-01-15 · Analyzed

6.8EPSS 0.001

Juniper Junos 24.4

Security check