What’s Vulnerable › Products

Juniper Junos OS vulnerabilities

932 known vulnerabilities, 8 confirmed exploited in the wild (CISA KEV), 255 published in the last 12 months.

Check whether your Juniper Junos OS version is affected

Exploited Juniper Junos OS vulnerabilities

• CVE-2015-5477 — ISC BIND Data Processing Errors Vulnerability
• CVE-2025-21590 — Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability
• CVE-2023-36851 — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
• CVE-2023-36847 — Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability
• CVE-2023-36846 — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability
• CVE-2023-36845 — Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability
• CVE-2023-36844 — Juniper Junos OS EX Series PHP External Variable Modification Vulnerability
• CVE-2020-1631 — Juniper Junos OS Path Traversal Vulnerability

Latest Juniper Junos OS vulnerabilities

• CVE-2026-102077 — Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops (CVSS 7.5)
• CVE-2026-101983 — Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured (CVSS 9.8)
• CVE-2026-101982 — Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used (CVSS 9.8)
• CVE-2026-101981 — Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled (CVSS 8.8)
• CVE-2026-101979 — Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled (CVSS 8.8)
• CVE-2026-101976 — Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash (CVSS 7.5)
• CVE-2026-101975 — Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used (CVSS 6.5)
• CVE-2026-101972 — Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled (CVSS 6.5)
• CVE-2026-101964 — Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message (CVSS 6.5)
• CVE-2026-101963 — Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used (CVSS 7.5)
• CVE-2026-101962 — Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used (CVSS 7.5)
• CVE-2026-101961 — Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy (CVSS 7.5)
• CVE-2026-101959 — Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash (CVSS 6.5)
• CVE-2026-101954 — Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled (CVSS 9.8)
• CVE-2026-101952 — Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled (CVSS 7.5)
• CVE-2026-101949 — Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash (CVSS 7.5)
• CVE-2026-33798 — Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled (CVSS 8.8)
• CVE-2026-33796 — Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled (CVSS 9.8)
• CVE-2026-33795 — Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised (CVSS 7.5)
• CVE-2026-33792 — Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured (CVSS 9.8)
• CVE-2026-33789 — Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service (CVSS 9.8)
• CVE-2026-103994 — Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution (CVSS 8.8)
• CVE-2026-103993 — Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes (CVSS 6.8)
• CVE-2026-102185 — Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used (CVSS 7.5)
• CVE-2026-102184 — Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash (CVSS 7.5)