Juniper Junos OS vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
291 matching records
- High8.4A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Li…Check if you run itEPSS 0.14%Apr 8, 2026
- Critical9.3Juniper junos_os_evolved Incorrect Permission Assignment for Critical ResourcePatch nowKEVEPSS 18.48%Feb 25, 2026
- High7.1A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privilegesCheck if you run itEPSS 0.37%Jan 15, 2026
- High8.7An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-ServiceCheck if you run itEPSS 0.48%Jan 15, 2026
- High8.7A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a DenCheck if you run itEPSS 0.41%Jan 15, 2026
- High8.7An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-basCheck if you run itEPSS 0.41%Jan 15, 2026
- High8.7An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos).Check if you run itEPSS 0.32%Jan 15, 2026
- High8.7An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthenticated, network-based atCheck if you run itEPSS 0.41%Jan 15, 2026
- Medium6.8A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of Juniper Networks Junos OS on MX10k Series allows a loCheck if you run itEPSS 0.11%Jan 15, 2026
- High7.1An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker flappCheck if you run itEPSS 0.24%Jan 15, 2026
- High7.1An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms aCheck if you run itEPSS 0.26%Jan 15, 2026
- High7.1A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attCheck if you run itEPSS 0.25%Jan 15, 2026
- High7.5A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, netwCheck if you run itEPSS 0.31%Jan 15, 2026
- High8.2A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers)Check if you run itEPSS 0.20%Jan 15, 2026
- High8.7An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-baseCheck if you run itEPSS 0.54%Jan 15, 2026
- High8.7A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series and MX Series with MX-SCheck if you run itEPSS 0.41%Jan 15, 2026
- High7.1A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges toCheck if you run itEPSS 0.40%Jan 15, 2026
- High7.1An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, network-adjacent attacker sending a specifCheck if you run itEPSS 0.26%Jan 15, 2026
- Medium6.9An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticatCheck if you run itEPSS 0.46%Jan 15, 2026
- Medium6.8A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges to causeCheck if you run itEPSS 0.14%Jan 15, 2026
- High8.7A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause aCheck if you run itEPSS 0.41%Jan 15, 2026
- Medium6.8An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-priCheck if you run itEPSS 0.13%Jan 15, 2026
- Medium6.3An Improper Check for Unusual or Exceptional Conditions vulnerability in the Juniper DHCP service (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a DHCP client inCheck if you run itEPSS 0.25%Jan 15, 2026
- Medium6.8An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with loCheck if you run itEPSS 0.14%Jan 15, 2026
- Medium5.1A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure to set appropriate X-FCheck if you run itEPSS 0.27%Jan 15, 2026