Juniper Junos OS security vulnerabilities
Networking / NAS. Public CVE monitoring for Juniper Junos OS. Vendor security advisories are linked on this page.
Built for Operators of this product.
291 public records · 0 security-fix timeline events. 18 published in the last 7 days. 111 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 23
- High 119
- Medium 11
- Low 0
2026-08-04153 issues2026-11-01
Known exploited
View all known exploited- High7.5ISC BIND Data Processing Errors VulnerabilityPatch nowKEVEPSS 99.58%Jul 29, 2015
- Critical9.3Juniper junos_os_evolved Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 18.48%Feb 25, 2026
- Medium6.1Juniper Junos OS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jan 25, 2024
- Medium6.7Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityPatch nowKEVEPSS 1.75%Mar 12, 2025
- Critical9.8Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityPatch nowKEVEPSS 95.07%Aug 17, 2023
- Medium5.3Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 93.47%Aug 17, 2023
- Medium5.3Juniper Junos OS EX Series PHP External Variable Modification VulnerabilityPatch nowKEVEPSS 89.96%Aug 17, 2023
- Medium5.3Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 83.45%Aug 17, 2023
Recently published
Browse catalog- High8.5An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device.Check if you run itEPSS 0.66%Oct 14, 2026
- High8.7Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is usedCheck if you run itEPSS 0.37%Oct 14, 2026
- High8.7Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crashCheck if you run itEPSS 0.46%Oct 14, 2026
- High8.7Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashesCheck if you run itEPSS 0.46%Oct 14, 2026
- Critical9.8Junos OS: MX Series: Certificate-based IKE packets cause root-level code executionCheck if you run itEPSS 0.41%Oct 14, 2026
- High8.7Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in useCheck if you run itEPSS 0.37%Oct 14, 2026
- High8.7Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is usedCheck if you run itEPSS 0.37%Oct 14, 2026
- Critical9.8Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromiseCheck if you run itEPSS 0.46%Oct 14, 2026
- High7.6Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is usedCheck if you run itEPSS 0.27%Oct 14, 2026
- High8.8Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabledCheck if you run itEPSS 0.30%Oct 14, 2026