Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-79840
Alta · 7.3
CWE-121 15/10/2026
HPE NonStop XABroker - Memory corruption vulnerability
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.
CVE-2026-79839
Alta · 7.3
CWE-121 15/10/2026
HPE NonStop ODBC/MX Server - Memory corruption vulnerability
A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.
CVE-2026-79838
Alta · 7.3
CWE-121 15/10/2026
HPE NonStop ODBC/MX Services - Memory corruption vulnerability
A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.
CVE-2026-79832
Alta · 7.6
CWE-121 15/10/2026
HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.
CVE-2026-79830
Média · 6.6
CWE-121 15/10/2026
HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability
A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.
CVE-2026-79823
Média · 4.0
CWE-121 15/10/2026
HPE NonStop EMS Distributor - Buffer Overflow vulnerability
HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.
CVE-2026-76663
Alta · 7.5
CWE-121 15/10/2026
HPE NonStop TELSERV - Memory corruption vulnerability
A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.
CVE-2026-76662
Média · 5.9
CWE-121 15/10/2026
HPE NonStop TELSERV - Memory corruption vulnerability
A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.
CVE-2026-73799
Alta · 7.5
CWE-121 14/10/2026
HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability
A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption
CVE-2026-101983
Crítica · 9.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.
CVE-2026-101982
Crítica · 9.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.
CVE-2026-101981
Alta · 8.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when LDP is enabled
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message.
CVE-2026-101979
Alta · 8.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled
A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when SNMP and AAA are enabled.
CVE-2026-33796
Crítica · 9.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.
CVE-2026-33798
Alta · 8.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled
A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.
CVE-2026-33792
Crítica · 9.8
CWE-121 14/10/2026
Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured
A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted packet received on a configured GRE tunnel.
CVE-2026-33789
Crítica · 9.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled.
CVE-2026-102182
Crítica · 9.8
CWE-121 14/10/2026
Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certificate-based packets.
This issue affects Junos OS on MX Series:
* All versions before 21.2R3-S11;
* from 21.4 before 21.4R3-S12;
* from 22.2 before 22.2R3-S8;
* from 22.3 before 22.3R3-S5;
* from 22.4 before 22.4R3-S9;
CVE-2026-102180
Alta · 7.5
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP RIB streaming telemetry subscription is active.
This issue does not affect Junos OS versions prior to 22.1R1.
This issue does not affect Junos OS Evolved versions prior to 22.1R1-EVO.
CVE-2026-102178
Crítica · 9.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise
A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled.
CVE-2026-102174
Alta · 8.8
CWE-121 14/10/2026
Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled
A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the remote-access VPN authentication and JIMS identity-publishing path.
CVE-2026-102069
Alta · 8.8
CWE-121 14/10/2026
Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled
A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is triggered when dot1x synchronization is enabled for the required Fusion satellite topology.
CVE-2026-102068
Alta · 7.5
CWE-121 14/10/2026
Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP.
CVE-2026-102061
Alta · 8.8
CWE-121 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message.
This issue only affects platforms that support Secure-ZTP.
CVE-2026-102057
Alta · 7.5
CWE-121 14/10/2026
Junos OS: An attacker causes DHCP service disruption during DHCP client operation
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP client response. The issue affects DHCP client operation and can interrupt related DHCP, relay, and zero-touch-provisioning services.