Vulnerabilities in Juniper Networks
1,086 resultsCVE-2025-52961HIGHJunos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restartEPSS 0.5%CVE-2026-102037CRITICALJunos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is usedEPSS 0.5%CVE-2017-2344HIGHJunos: Buffer overflow in sockets libraryEPSS 0.5%CVE-2022-22249MEDIUMJunos OS: MX Series: An FPC crash might be seen due to mac-moves within the same bridge domainEPSS 0.5%CVE-2023-22412HIGHJunos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processedEPSS 0.5%CVE-2026-102046HIGHJunos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is usedEPSS 0.5%CVE-2025-52984HIGHJunos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashesEPSS 0.5%CVE-2024-30409MEDIUMJunos OS and Junos OS Evolved: Higher CPU consumption on routing engine leads to Denial of Service (DoS).EPSS 0.5%CVE-2024-21610MEDIUMJunos OS: If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuckEPSS 0.5%CVE-2026-101954CRITICALJunos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabledEPSS 0.5%CVE-2024-39530HIGHJunos OS: Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crashEPSS 0.5%CVE-2026-21920HIGHJunos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crashEPSS 0.5%CVE-2024-39529HIGHJunos OS: SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crashEPSS 0.5%CVE-2024-39551HIGHJunos OS: SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic dropEPSS 0.5%CVE-2023-28978MEDIUMJunos OS Evolved: Read access to some confidential user information is possibleEPSS 0.5%CVE-2026-57021MEDIUMJunos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crashEPSS 0.5%CVE-2026-33784CRITICALJSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged accessEPSS 0.5%CVE-2024-39542HIGHJunos OS and Junos OS Evolved: A malformed CFM packet or specific transit traffic leads to FPC crashEPSS 0.5%CVE-2026-101980CRITICALJunos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabledEPSS 0.5%CVE-2025-52950MEDIUMJuniper Security Director: Insufficient authorization for multiple endpoints in web interfaceEPSS 0.5%