CVE Intelligence

Vulnerabilidades de Juniper Networks

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Juniper Networks: 273 registro(s), com severidade, exploração e correções.

Junos OS 209Junos Os Evolved 152Junos 70Junos Space 28Virtual Lightweight Collector 2JSI LWC 2Ctp Operating System 1WAN Assurance Managed Router 1Session Smart Conductor 1Session Smart Router 1Junos Space Security Director 1Paragon Automation (Pathfinder, Planner, Insights) 1CTP OS 1Paragon Automation 1Apstra 1Space Security Director 1Security Director Policy Enforcer 1Screenos 1

Somente exploradas (KEV) →

CVE-2026-102015 Alta · 8.8 CWE-122 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used
A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface.
CVE-2026-102014 Alta · 8.8 CWE-121 14/10/2026
Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response.
CVE-2026-102013 Média · 4.4 CWE-476 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message.
CVE-2026-102012 Alta · 7.5 CWE-617 14/10/2026
Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.
CVE-2026-102011 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors (or one neighbor duplicated by an L2 loop) advertise the same transport address on a link-protected interface.
CVE-2026-102000 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic.
CVE-2026-101999 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message.
CVE-2026-101997 Alta · 8.1 CWE-89 14/10/2026
Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.
CVE-2026-101996 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP allows an adjacent attacker to cause a denial of service via an inconsistent ICCP peer message.
CVE-2026-101995 Média · 4.3 CWE-1284 14/10/2026
Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets.
CVE-2026-101994 Alta · 7.1 CWE-130 14/10/2026
Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed ICCP message.
CVE-2026-101993 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a denial of service via a VPLS signaling update when automatic site-ID negotiation is enabled.
CVE-2026-101988 Média · 6.5 CWE-476 14/10/2026
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
CVE-2026-101992 Média · 6.5 CWE-20 14/10/2026
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an rpd crash via a BGP VPLS signaling update.
CVE-2026-101991 Baixa · 3.1 CWE-130 14/10/2026
Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address family enabled.
CVE-2026-101990 Crítica · 9.8 CWE-121 14/10/2026
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.
CVE-2026-101989 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP neighbor to cause an rpd crash via a crafted LDP message.
CVE-2026-101987 Média · 6.5 14/10/2026
Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.
CVE-2026-101986 Crítica · 9.8 CWE-287 14/10/2026
Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.
CVE-2026-101985 Média · 6.5 CWE-1284 14/10/2026
Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled
A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated IS-IS peer to cause a denial of service.
CVE-2026-101984 Média · 6.5 CWE-617 14/10/2026
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent BGP peer to cause a denial of service when labeled-unicast aggregate-label is configured.
CVE-2026-101980 Crítica · 9.8 CWE-191 14/10/2026
Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled
An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of service by a kernel crash.
CVE-2026-101978 Alta · 8.8 CWE-78 14/10/2026
Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted gRPC response.
CVE-2026-101977 Alta · 7.5 CWE-476 14/10/2026
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used.
CVE-2026-101974 Média · 6.5 14/10/2026
Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets.