Vendor
Juniper Networks vulnerabilities
216 advisories tracked, 8 exploited in the wild according to CISA, 57 published in 2026.
Data refreshed 13 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2015-7755ScreenOS
ScreenOS Improper AuthenticationCVE-2025-21590Junos OS (SRX firewalls)
An local attacker with shell access can execute arbitrary codeCVE-2024-21591Junos OS (SRX firewalls)
SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution
Products covered
Select a product to see only its advisories.
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-21901 | Junos OS (SRX firewalls) | Configuration of a specific SSH option results in mgd crash | MEDIUM 6.7 | 0.17% | – | |
| CVE-2026-33799 | Junos OS (SRX firewalls) | Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash | MEDIUM 5.3 | 0.37% | – | |
| CVE-2026-33800 | Junos OS (SRX firewalls) | MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash | HIGH 7.1 | 0.27% | – | |
| CVE-2026-33801 | Junos OS (SRX firewalls) | When a specifically malformed BGP route update is received RPD crashes | HIGH 7.1 | 0.28% | – | |
| CVE-2026-33802 | Junos OS (SRX firewalls) | EX Series: Unauthorized users can execute service-impacting CLI command | MEDIUM 6.8 | 0.12% | – | |
| CVE-2026-57019 | Junos OS (SRX firewalls) | MX Series: Specific traffic causes an FPC to reset | HIGH 7.1 | 0.27% | – | |
| CVE-2026-57020 | Junos OS (SRX firewalls) | QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood | HIGH 7.1 | 0.27% | – | |
| CVE-2026-57021 | Junos OS (SRX firewalls) | SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash | MEDIUM 6.9 | 0.47% | – | |
| CVE-2026-57022 | Junos OS (SRX firewalls) | MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE | HIGH 8.2 | 0.40% | – | |
| CVE-2026-57023 | Junos OS (SRX firewalls) | MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash | HIGH 8.7 | 0.46% | – | |
| CVE-2026-57024 | Junos OS (SRX firewalls) | MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously | MEDIUM 6.9 | 0.42% | – | |
| CVE-2026-57025 | Junos OS (SRX firewalls) | EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash | MEDIUM 6.8 | 0.14% | – | |
| CVE-2026-57026 | Junos OS (SRX firewalls) | MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash | HIGH 8.7 | 0.46% | – | |
| CVE-2026-57027 | Junos OS (SRX firewalls) | EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash | HIGH 7.1 | 0.27% | – | |
| CVE-2026-57030 | Junos OS (SRX firewalls) | SRX Series: Flow sessions are not getting cleared leading to a DoS | HIGH 8.2 | 0.38% | – | |
| CVE-2026-57031 | Junos OS (SRX firewalls) | MX Series: For subscribers configured on static interfaces, input filters are not in effect | MEDIUM 5.3 | 0.22% | – | |
| CVE-2026-57032 | Junos OS (SRX firewalls) | EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash | HIGH 7.1 | 0.42% | – | |
| CVE-2026-57054 | Junos OS (SRX firewalls) | MX Series: Web filtering doesn't block specifically formatted URLs | MEDIUM 6.9 | 0.37% | – | |
| CVE-2025-30650 | Junos OS (SRX firewalls) | Privileged local user can gain access to a Linux-based FPC as root | HIGH 8.4 | 0.14% | – | |
| CVE-2026-21916 | Junos OS (SRX firewalls) | A low privileged user can escalate their privileges so that they can login as root | HIGH 7 | 0.13% | – | |
| CVE-2026-21919 | Junos OS (SRX firewalls) | A high frequency of connecting and disconnecting NETCONF sessions causes management unavailability | HIGH 7.1 | 0.23% | – | |
| CVE-2026-33773 | Junos OS (SRX firewalls) | EX Series, QFX Series: If the same egress filter is configured on both an IRB and a physical interface one of those is not applied | MEDIUM 6.9 | 0.31% | – | |
| CVE-2026-33774 | Junos OS (SRX firewalls) | MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect | MEDIUM 6.9 | 0.29% | – | |
| CVE-2026-33775 | Junos OS (SRX firewalls) | MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd | HIGH 7.1 | 0.32% | – | |
| CVE-2026-33776 | Junos OS (SRX firewalls) | Specific low privileged CLI command exposes sensitive information | MEDIUM 6.8 | 0.13% | – | |
| CVE-2026-33778 | Junos OS (SRX firewalls) | SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes | HIGH 8.7 | 0.46% | – | |
| CVE-2026-33779 | Junos OS (SRX firewalls) | SRX Series: Insufficient certificate verification for device to SD cloud communication | HIGH 8.3 | 0.18% | – | |
| CVE-2026-33780 | Junos OS (SRX firewalls) | In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald | HIGH 7.1 | 0.28% | – | |
| CVE-2026-33781 | Junos OS (SRX firewalls) | EX Series, QFX Series: In a VXLAN scenario when specific control protocol packets are received, memory leaks and eventually no traffic is passed | HIGH 7.1 | 0.27% | – | |
| CVE-2026-33782 | Junos OS (SRX firewalls) | MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts | HIGH 8.7 | 0.55% | – | |
| CVE-2026-33785 | Junos OS (SRX firewalls) | MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario | MEDIUM 6.3 | 0.14% | – | |
| CVE-2026-33787 | Junos OS (SRX firewalls) | SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes | MEDIUM 6.8 | 0.13% | – | |
| CVE-2026-33790 | Junos OS (SRX firewalls) | SRX Series: In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart. | HIGH 8.7 | 0.46% | – | |
| CVE-2026-33791 | Junos OS (SRX firewalls) | Execution of crafted CLI commands allows for arbitrary shell injection as root | HIGH 8.4 | 0.67% | – | |
| CVE-2026-33793 | Junos OS (SRX firewalls) | When an unsigned Python op script configuration is present, a local low privileged user can compromise the system | HIGH 8.5 | 0.17% | – | |
| CVE-2026-33797 | Junos OS (SRX firewalls) | An attacker sending a specific genuine BGP packet causes a BGP reset | HIGH 7.1 | 0.27% | – | |
| CVE-2026-33786 | Junos OS (SRX firewalls) | SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes | MEDIUM 6.8 | 0.13% | – | |
| CVE-2025-59959 | Junos OS (SRX firewalls) | Executing a specific show command leads to an rpd crash | MEDIUM 6.8 | 0.14% | – | |
| CVE-2025-59960 | Junos OS (SRX firewalls) | DHCP Option 82 messages from clients being passed unmodified to the DHCP server | MEDIUM 6.3 | 0.25% | – | |
| CVE-2025-59961 | Junos OS (SRX firewalls) | Unix socket used to control the jdhcpd process is world-writable | MEDIUM 6.8 | 0.13% | – | |
| CVE-2025-60003 | Junos OS (SRX firewalls) | BGP update with a set of specific attributes causes rpd crash | HIGH 8.7 | 0.41% | – | |
| CVE-2025-60007 | Junos OS (SRX firewalls) | A specifically crafted 'show chassis' command causes chassisd to crash | MEDIUM 6.8 | 0.14% | – | |
| CVE-2025-60011 | Junos OS (SRX firewalls) | Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap | MEDIUM 6.9 | 0.46% | – | |
| CVE-2026-0203 | Junos OS (SRX firewalls) | Receipt of a specifically malformed ICMP packet causes an FPC restart | HIGH 7.1 | 0.26% | – | |
| CVE-2026-21903 | Junos OS (SRX firewalls) | Subscribing to telemetry sensors at scale causes all FPCs to crash | HIGH 7.1 | 0.40% | – | |
| CVE-2026-21905 | Junos OS (SRX firewalls) | SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash | HIGH 8.7 | 0.41% | – | |
| CVE-2026-21906 | Junos OS (SRX firewalls) | SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash | HIGH 8.7 | 0.54% | – | |
| CVE-2026-21908 | Junos OS (SRX firewalls) | Use after free vulnerability In 802.1X authentication daemon can cause crash of the dot1xd process | HIGH 7.5 | 0.31% | – | |
| CVE-2026-21909 | Junos OS (SRX firewalls) | Receipt of specific IS-IS update packet causes memory leak leading to RPD crash | HIGH 7.1 | 0.25% | – | |
| CVE-2026-21910 | Junos OS (SRX firewalls) | EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop | HIGH 7.1 | 0.26% | – | |
| CVE-2026-21912 | Junos OS (SRX firewalls) | MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset | MEDIUM 6.8 | 0.11% | – | |
| CVE-2026-21913 | Junos OS (SRX firewalls) | EX4000: A high volume of traffic destined to the device leads to a crash and restart | HIGH 8.7 | 0.41% | – | |
| CVE-2026-21914 | Junos OS (SRX firewalls) | SRX Series: A specifically malformed GTP message will cause an FPC crash | HIGH 8.7 | 0.32% | – | |
| CVE-2026-21917 | Junos OS (SRX firewalls) | SRX Series: Specifically malformed SSL packet causes FPC crash | HIGH 8.7 | 0.41% | – | |
| CVE-2026-21918 | Junos OS (SRX firewalls) | SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes | HIGH 8.7 | 0.41% | – | |
| CVE-2026-21920 | Junos OS (SRX firewalls) | SRX Series: If a specific request is processed by the DNS subsystem flowd will crash | HIGH 8.7 | 0.48% | – | |
| CVE-2026-21921 | Junos OS (SRX firewalls) | When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash | HIGH 7.1 | 0.37% | – | |
| CVE-2025-11198 | Secure Connect and Security Director | An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX Server | HIGH 8.5 | 0.27% | – | |
| CVE-2025-52960 | Junos OS (SRX firewalls) | SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash | HIGH 8.2 | 0.33% | – | |
| CVE-2025-59962 | Junos OS (SRX firewalls) | With BGP sharding enabled, change in indirect next-hop can cause RPD crash | MEDIUM 6 | 0.18% | – | |
| CVE-2025-59964 | Junos OS (SRX firewalls) | SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart | HIGH 8.7 | 0.36% | – | |
| CVE-2025-59968 | Junos OS (SRX firewalls) | Insufficient authorization for sensitive resources in web interface | HIGH 7.7 | 0.30% | – | |
| CVE-2025-59974 | Secure Connect and Security Director | Persistent Cross-Site Scripting (XSS) vulnerability | CRITICAL 9.3 | 0.38% | – | |
| CVE-2025-59980 | Junos OS (SRX firewalls) | When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed | MEDIUM 6.9 | 0.29% | – | |
| CVE-2025-60004 | Junos OS (SRX firewalls) | Specific BGP EVPN update message causes rpd crash | HIGH 8.7 | 0.42% | – | |
| CVE-2025-60010 | Junos OS (SRX firewalls) | Device allows login for user with expired password | MEDIUM 5.3 | 0.18% | – | |
| CVE-2025-59957 | Junos OS (SRX firewalls) | EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor | HIGH 7 | 0.18% | – | |
| CVE-2025-30661 | Junos OS (SRX firewalls) | Low-privileged user can cause script to run as root, leading to privilege escalation | HIGH 8.5 | 0.20% | – | |
| CVE-2025-52946 | Junos OS (SRX firewalls) | With traceoptions enabled, receipt of malformed AS PATH causes RPD crash | HIGH 8.7 | 0.52% | – | |
| CVE-2025-52947 | Junos OS (SRX firewalls) | ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash | HIGH 7.1 | 0.30% | – | |
| CVE-2025-52948 | Junos OS (SRX firewalls) | Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled | HIGH 8.2 | 0.50% | – | |
| CVE-2025-52949 | Junos OS (SRX firewalls) | In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash | HIGH 7.1 | 0.32% | – | |
| CVE-2025-52950 | Secure Connect and Security Director | Insufficient authorization for multiple endpoints in web interface | MEDIUM 6.4 | 0.47% | – | |
| CVE-2025-52951 | Junos OS (SRX firewalls) | IPv6 firewall filter fails to match payload-protocol | MEDIUM 6.9 | 0.38% | – | |
| CVE-2025-52952 | Junos OS (SRX firewalls) | MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash | HIGH 7.1 | 0.31% | – | |
| CVE-2025-52953 | Junos OS (SRX firewalls) | An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset | HIGH 7.1 | 0.33% | – | |
| CVE-2025-52955 | Junos OS (SRX firewalls) | When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart | HIGH 7.1 | 0.32% | – | |
| CVE-2025-52958 | Junos OS (SRX firewalls) | When route validation is enabled, BGP connection establishment failure causes RPD crash | MEDIUM 6 | 0.25% | – | |
| CVE-2025-52963 | Junos OS (SRX firewalls) | A low-privileged user can disable an interface | MEDIUM 6.8 | 0.16% | – | |
| CVE-2025-52964 | Junos OS (SRX firewalls) | Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured | HIGH 7.1 | 0.30% | – | |
| CVE-2025-52980 | Junos OS (SRX firewalls) | SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message | HIGH 8.7 | 0.54% | – | |
| CVE-2025-52981 | Junos OS (SRX firewalls) | SRX Series: Sequence of specific PIM packets causes a flowd crash | HIGH 8.7 | 0.52% | – | |
| CVE-2025-52982 | Junos OS (SRX firewalls) | MX Series: When specific SIP packets are processed the MS-MPC will crash | HIGH 8.2 | 0.44% | – | |
| CVE-2025-52983 | Junos OS (SRX firewalls) | After removing ssh public key authentication root can still log in | HIGH 8.6 | 0.68% | – | |
| CVE-2025-52984 | Junos OS (SRX firewalls) | When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes | HIGH 8.2 | 0.48% | – | |
| CVE-2025-52986 | Junos OS (SRX firewalls) | When RIB sharding is configured each time a show command is executed RPD memory leaks | MEDIUM 6.8 | 0.13% | – | |
| CVE-2025-52988 | Junos OS (SRX firewalls) | Privilege escalation to root via CLI command 'request system logout' | HIGH 8.4 | 0.44% | – | |
| CVE-2025-52989 | Junos OS (SRX firewalls) | Annotate configuration command can be used to change the configuration | MEDIUM 6.8 | 0.13% | – | |
| CVE-2025-6549 | Junos OS (SRX firewalls) | SRX Series: J-Web can be exposed on additional interfaces | MEDIUM 6.9 | 0.24% | – | |
| CVE-2025-21591 | Junos OS (SRX firewalls) | An unauthenticated adjacent attacker sending a malformed DHCP packet causes jdhcpd to crash | HIGH 7.1 | 0.34% | – | |
| CVE-2025-21594 | Junos OS (SRX firewalls) | MX Series: In DS-lite and NAT scenario receipt of crafted IPv6 traffic causes port block | HIGH 8.7 | 0.42% | – | |
| CVE-2025-21595 | Junos OS (SRX firewalls) | In an EVPN-VXLAN scenario specific ARP or NDP packets cause FPC to crash | HIGH 7.1 | 0.26% | – | |
| CVE-2025-21597 | Junos OS (SRX firewalls) | When BGP rib-sharding and update-threading are configured and a peer flaps, an rpd core is observed | MEDIUM 6 | 0.25% | – | |
| CVE-2025-21601 | Junos OS (SRX firewalls) | SRX and EX Series, MX240, MX480, MX960, QFX5120 Series: When web management is enabled for specific services an attacker may cause a CPU spike by sending genuine packets to the device | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30644 | Junos OS (SRX firewalls) | EX2300, EX3400, EX4000 Series, QFX5k Series: Receipt of a specific DHCP packet causes FPC crash when DHCP Option 82 is enabled | HIGH 7.7 | 0.32% | – | |
| CVE-2025-30645 | Junos OS (SRX firewalls) | SRX Series: Transmission of specific control traffic sent out of a DS-Lite tunnel results in flowd crash | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30646 | Junos OS (SRX firewalls) | Receipt of a malformed LLDP TLV results in l2cpd crash | HIGH 7.1 | 0.24% | – | |
| CVE-2025-30647 | Junos OS (SRX firewalls) | MX Series: Subscriber login/logout activity will lead to a memory leak | HIGH 7.1 | 0.24% | – | |
| CVE-2025-30648 | Junos OS (SRX firewalls) | Receipt of a specifically malformed DHCP packet causes jdhcpd process to crash | HIGH 7.1 | 0.23% | – | |
| CVE-2025-30649 | Junos OS (SRX firewalls) | MX240, MX480, MX960 with SPC3: An attacker sending specific packets will cause a CPU utilization DoS. | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30651 | Junos OS (SRX firewalls) | Receipt of a specific ICMPv6 packet causes a memory overrun leading to an rpd crash | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30652 | Junos OS (SRX firewalls) | Executing a specific CLI command when asregex-optimized is configured causes an rpd crash | MEDIUM 6.8 | 0.16% | – | |
| CVE-2025-30653 | Junos OS (SRX firewalls) | LSP flap in a specific MPLS scenario leads to rpd crash | MEDIUM 6 | 0.24% | – | |
| CVE-2025-30654 | Junos OS (SRX firewalls) | A local, low privileged user can access sensitive information | MEDIUM 6.8 | 0.17% | – | |
| CVE-2025-30655 | Junos OS (SRX firewalls) | A specific CLI command will cause an RPD crash when rib-sharding and update-threading is enabled | MEDIUM 6.8 | 0.15% | – | |
| CVE-2025-30656 | Junos OS (SRX firewalls) | MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crash | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30657 | Junos OS (SRX firewalls) | Processing of a specific BGP update causes the SRRD process to crash | MEDIUM 6.9 | 0.40% | – | |
| CVE-2025-30658 | Junos OS (SRX firewalls) | SRX Series: On devices with Anti-Virus enabled, malicious server responses will cause memory to leak ultimately causing forwarding to stop | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30659 | Junos OS (SRX firewalls) | SRX Series: A device configured for vector routing crashes when receiving malformed traffic | HIGH 8.7 | 0.42% | – | |
| CVE-2025-30660 | Junos OS (SRX firewalls) | MX Series: Decapsulation of specific GRE packets leads to PFE reset | HIGH 8.7 | 0.42% | – | |
| CVE-2025-21590 | Junos OS (SRX firewalls) | An local attacker with shell access can execute arbitrary code | MEDIUM 6.7 | 1.7% | Yes | |
| CVE-2024-39564 | Junos OS (SRX firewalls) | Receipt of malformed BGP path attributes leads to RPD crash | HIGH 8.7 | 0.42% | – | |
| CVE-2025-21592 | Junos OS (SRX firewalls) | SRX Series: Low privileged user able to access highly sensitive information on file system | MEDIUM 6.8 | 0.17% | – | |
| CVE-2025-21593 | Junos OS (SRX firewalls) | On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash | HIGH 7.1 | 0.24% | – | |
| CVE-2025-21596 | Junos OS (SRX firewalls) | SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crash | MEDIUM 6.8 | 0.15% | – | |
| CVE-2025-21600 | Junos OS (SRX firewalls) | With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash | HIGH 7.1 | 0.24% | – | |
| CVE-2025-21602 | Junos OS (SRX firewalls) | Receipt of specially crafted BGP update packet causes RPD crash | HIGH 7.1 | 0.24% | – | |
| CVE-2025-21598 | Junos OS (SRX firewalls) | When BGP traceoptions are configured, receipt of malformed BGP packets causes RPD to crash | HIGH 8.2 | 0.72% | – | |
| CVE-2024-39515 | Junos OS (SRX firewalls) | With BGP traceoptions enabled, receipt of specifically malformed BGP update causes RPD crash | HIGH 8.7 | 0.46% | – | |
| CVE-2024-39516 | Junos OS (SRX firewalls) | With certain BGP options enabled, receipt of specifically malformed BGP update causes RPD crash | HIGH 8.7 | 0.43% | – | |
| CVE-2024-39525 | Junos OS (SRX firewalls) | When BGP traceoptions is enabled, receipt of specially crafted BGP packet causes RPD crash | HIGH 8.7 | 0.43% | – | |
| CVE-2024-39526 | Junos OS (SRX firewalls) | MX Series with MPC10/MPC11/LC9600, MX304, EX9200, PTX Series: Receipt of malformed DHCP packets causes interfaces to stop processing packets | HIGH 7.1 | 0.37% | – | |
| CVE-2024-39527 | Junos OS (SRX firewalls) | SRX Series: Low privileged user able to access sensitive information on file system | MEDIUM 6.8 | 0.23% | – | |
| CVE-2024-39547 | Junos OS (SRX firewalls) | cRPD: Receipt of crafted TCP traffic can trigger high CPU utilization | HIGH 8.7 | 0.97% | – | |
| CVE-2024-47491 | Junos OS (SRX firewalls) | Receipt of a specific malformed BGP path attribute leads to an RPD crash | HIGH 8.2 | 0.60% | – | |
| CVE-2024-47493 | Junos OS (SRX firewalls) | MX Series: Trio-based FPCs: Continuous physical Interface flaps causes local FPC to crash | HIGH 7.1 | 0.37% | – | |
| CVE-2024-47494 | Junos OS (SRX firewalls) | Due to a race condition AgentD process causes a memory corruption and FPC reset | HIGH 8.2 | 0.36% | – | |
| CVE-2024-47496 | Junos OS (SRX firewalls) | MX Series: The PFE will crash on running specific command | MEDIUM 6.8 | 0.20% | – | |
| CVE-2024-47497 | Junos OS (SRX firewalls) | SRX Series, QFX Series, MX Series and EX Series: Receiving specific HTTPS traffic causes resource exhaustion | HIGH 8.7 | 0.60% | – | |
| CVE-2024-47499 | Junos OS (SRX firewalls) | In a BMP scenario receipt of a malformed AS PATH attribute can cause an RPD crash | HIGH 8.7 | 0.64% | – | |
| CVE-2024-47501 | Junos OS (SRX firewalls) | MX304, MX with MPC10/11/LC9600, and EX9200 with EX9200-15C: In a VPLS or Junos Fusion scenario specific show commands cause FPCs to crash | MEDIUM 6.8 | 0.21% | – | |
| CVE-2024-47503 | Junos OS (SRX firewalls) | SRX4600 and SRX5000 Series: Sequence of specific PIM packets causes a flowd crash | HIGH 7.1 | 0.33% | – | |
| CVE-2024-47504 | Junos OS (SRX firewalls) | SRX5000 Series: Receipt of a specific malformed packet will cause a flowd crash | HIGH 8.7 | 0.62% | – | |
| CVE-2024-47506 | Junos OS (SRX firewalls) | SRX Series: A large amount of traffic being processed by ATP Cloud can lead to a PFE crash | HIGH 8.2 | 0.29% | – | |
| CVE-2024-47507 | Junos OS (SRX firewalls) | BGP update message containing aggregator attribute with an ASN value of zero (0) is accepted | MEDIUM 6.9 | 0.29% | – | |
| CVE-2024-39511 | Junos OS (SRX firewalls) | The 802.1X Authentication Daemon crashes on running a specific command | MEDIUM 6.8 | 0.15% | – | |
| CVE-2024-39514 | Junos OS (SRX firewalls) | Receiving specific traffic on devices with EVPN-VPWS with IGMP-snooping enabled will cause the rpd to crash | HIGH 7.1 | 0.25% | – | |
| CVE-2024-39517 | Junos OS (SRX firewalls) | Upon processing specific L2 traffic, rpd can hang in devices with EVPN/VXLAN configured | HIGH 7.1 | 0.25% | – | |
| CVE-2024-39518 | Junos OS (SRX firewalls) | MX240, MX480, MX960 platforms using MPC10E: Memory leak will be observed when subscribed to a specific subscription on Junos Telemetry Interface | HIGH 8.7 | 0.42% | – | |
| CVE-2024-39554 | Junos OS (SRX firewalls) | BGP multipath incremental calculation is resulting in an rpd crash | HIGH 8.2 | 0.37% | – | |
| CVE-2024-39555 | Junos OS (SRX firewalls) | Receipt of a specific malformed BGP update causes the session to reset | HIGH 8.7 | 0.50% | – | |
| CVE-2024-39556 | Junos OS (SRX firewalls) | Loading a malicious certificate from the CLI may result in a stack-based overflow | HIGH 7.1 | 0.09% | – | |
| CVE-2024-39558 | Junos OS (SRX firewalls) | Receipt of specific PIM packet causes rpd crash when PIM is configured along with MoFRR | HIGH 7.1 | 0.26% | – | |
| CVE-2024-39560 | Junos OS (SRX firewalls) | Memory leak due to RSVP neighbor persistent error leading to kernel crash | HIGH 7.1 | 0.25% | – | |
| CVE-2024-39561 | Junos OS (SRX firewalls) | SRX4600, SRX5000 Series: TCP packets with SYN/FIN or SYN/RST are transferred after enabling no-syn-check with Express Path | MEDIUM 6.9 | 0.31% | – | |
| CVE-2024-39565 | Junos OS (SRX firewalls) | J-Web: An unauthenticated, network-based attacker can perform XPATH injection attack against a device. | HIGH 7.7 | 0.52% | – | |
| CVE-2024-39528 | Junos OS (SRX firewalls) | Concurrent deletion of a routing-instance and receipt of an SNMP request cause an RPD crash | MEDIUM 6 | 0.34% | – | |
| CVE-2024-39529 | Junos OS (SRX firewalls) | SRX Series: If DNS traceoptions are configured in a DGA or tunnel detection scenario specific DNS traffic leads to a PFE crash | HIGH 8.7 | 0.48% | – | |
| CVE-2024-39530 | Junos OS (SRX firewalls) | Attempting to access specific sensors on platforms not supporting these will lead to a chassisd crash | HIGH 8.7 | 0.48% | – | |
| CVE-2024-39532 | Junos OS (SRX firewalls) | Confidential information in logs can be accessed by another user | MEDIUM 6.3 | 0.15% | – | |
| CVE-2024-39533 | Junos OS (SRX firewalls) | QFX5000 Series and EX4600 Series: Output firewall filter is not applied if certain match criteria are used | MEDIUM 6.9 | 0.30% | – | |
| CVE-2024-39536 | Junos OS (SRX firewalls) | Flaps of BFD sessions with authentication cause a ppmd memory leak | MEDIUM 6 | 0.23% | – | |
| CVE-2024-39539 | Junos OS (SRX firewalls) | MX Series: Continuous subscriber logins will lead to a memory leak and eventually an FPC crash | MEDIUM 6 | 0.22% | – | |
| CVE-2024-39540 | Junos OS (SRX firewalls) | SRX Series, and MX Series with SPC3: Specific valid TCP traffic can cause a pfe crash | HIGH 8.7 | 0.49% | – | |
| CVE-2024-39541 | Junos OS (SRX firewalls) | Inconsistent information in the TE database can lead to an rpd crash | HIGH 7.1 | 0.33% | – | |
| CVE-2024-39542 | Junos OS (SRX firewalls) | A malformed CFM packet or specific transit traffic leads to FPC crash | HIGH 8.7 | 0.47% | – | |
| CVE-2024-39543 | Junos OS (SRX firewalls) | Receipt of a large RPKI-RTR PDU packet can cause rpd to crash | HIGH 7.1 | 0.33% | – | |
| CVE-2024-39545 | Junos OS (SRX firewalls) | SRX Series, MX Series with SPC3 and NFX350: When VPN tunnels parameters are not configured in specific way the iked process will crash | HIGH 8.7 | 0.49% | – | |
| CVE-2024-39549 | Junos OS (SRX firewalls) | Receipt of malformed BGP path attributes leads to a memory leak | HIGH 8.7 | 0.47% | – | |
| CVE-2024-39550 | Junos OS (SRX firewalls) | MX Series with SPC3 line card: Port flaps causes rtlogd memory leak leading to Denial of Service | HIGH 7.1 | 0.33% | – | |
| CVE-2024-39551 | Junos OS (SRX firewalls) | SRX Series and MX Series with SPC3 and MS-MPC/MIC: Receipt of specific packets in H.323 ALG causes traffic drop | HIGH 8.7 | 0.48% | – | |
| CVE-2024-39552 | Junos OS (SRX firewalls) | Malformed BGP UPDATE causes RPD crash | HIGH 8.7 | 0.59% | – | |
| CVE-2024-21586 | Junos OS (SRX firewalls) | SRX Series and NFX Series: Specific valid traffic leads to a PFE crash | HIGH 7.5 | 0.50% | – | |
| CVE-2024-21615 | Junos OS (SRX firewalls) | A low-privileged user can access confidential information | MEDIUM 5.1 | 0.15% | – | |
| CVE-2024-21618 | Junos OS (SRX firewalls) | When LLDP is enabled and a malformed LLDP packet is received, l2cpd crashes | HIGH 7.1 | 0.30% | – | |
| CVE-2024-21593 | Junos OS (SRX firewalls) | MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash | HIGH 7.1 | 0.29% | – | |
| CVE-2024-21598 | Junos OS (SRX firewalls) | A malformed BGP tunnel encapsulation attribute will lead to an rpd crash | HIGH 8.7 | 0.57% | – | |
| CVE-2024-21605 | Junos OS (SRX firewalls) | SRX 300 Series: Specific link local traffic causes a control plane overload | HIGH 7.1 | 0.29% | – | |
| CVE-2024-21609 | Junos OS (SRX firewalls) | MX Series with SPC3, and SRX Series: If specific IPsec parameters are negotiated iked will crash due to a memory leak | HIGH 7.1 | 0.29% | – | |
| CVE-2024-21610 | Junos OS (SRX firewalls) | If in a scaled CoS scenario information on CoS state is gathered mgd processes get stuck | MEDIUM 5.3 | 0.48% | – | |
| CVE-2024-30394 | Junos OS (SRX firewalls) | A specific EVPN type-5 route causes rpd crash | HIGH 8.7 | 0.66% | – | |
| CVE-2024-30395 | Junos OS (SRX firewalls) | A malformed BGP tunnel encapsulation attribute will lead to an rpd crash | HIGH 8.7 | 0.54% | – | |
| CVE-2024-30405 | Junos OS (SRX firewalls) | SRX 5000 Series with SPC2: Processing of specific crafted packets when ALG is enabled causes a transit traffic Denial of Service | HIGH 8.7 | 0.63% | – | |
| CVE-2024-30409 | Junos OS (SRX firewalls) | Higher CPU consumption on routing engine leads to Denial of Service (DoS). | MEDIUM 6.9 | 0.48% | – | |
| CVE-2024-30382 | Junos OS (SRX firewalls) | RPD crash when CoS-based forwarding (CBF) policy is configured | HIGH 8.7 | 0.71% | – | |
| CVE-2024-30384 | Junos OS (SRX firewalls) | EX4300 Series: If a specific CLI command is issued PFE crashes will occur | MEDIUM 6.8 | 0.17% | – | |
| CVE-2024-30386 | Junos OS (SRX firewalls) | In a EVPN-VXLAN scenario state changes on adjacent systems can cause an l2ald process crash | HIGH 7.1 | 0.27% | – | |
| CVE-2024-30387 | Junos OS (SRX firewalls) | ACX5448 & ACX710: Due to interface flaps the PFE process can crash | HIGH 7.1 | 0.21% | – | |
| CVE-2024-30388 | Junos OS (SRX firewalls) | QFX5000 Series and EX Series: Specific malformed LACP packets will cause flaps | HIGH 7.1 | 0.29% | – | |
| CVE-2024-30389 | Junos OS (SRX firewalls) | EX4300 Series: Firewall filter not blocking egress traffic | MEDIUM 6.9 | 0.36% | – | |
| CVE-2024-30391 | Junos OS (SRX firewalls) | MX Series with SPC3, and SRX Series: When IPsec authentication is configured with "hmac-sha-384" and "hmac-sha-512" no authentication of traffic is performed | MEDIUM 6.3 | 0.43% | – | |
| CVE-2024-30392 | Junos OS (SRX firewalls) | MX Series with SPC3 and MS-MPC/-MIC: When URL filtering is enabled and a specific URL request is received a flowd crash occurs | HIGH 8.7 | 0.69% | – | |
| CVE-2024-30397 | Junos OS (SRX firewalls) | An invalid certificate causes a Denial of Service in the Internet Key Exchange (IKE) process | HIGH 8.7 | 0.34% | – | |
| CVE-2024-30398 | Junos OS (SRX firewalls) | SRX4600 Series - A high amount of specific traffic causes packet drops and an eventual PFE crash | HIGH 8.7 | 0.60% | – | |
| CVE-2024-30401 | Junos OS (SRX firewalls) | MX Series and EX9200-15C: Stack-based buffer overflow in aftman | HIGH 8.2 | 0.58% | – | |
| CVE-2024-30402 | Junos OS (SRX firewalls) | The l2ald crashes on receiving telemetry messages from a specific subscription | HIGH 8.2 | 0.52% | – | |
| CVE-2024-30378 | Junos OS (SRX firewalls) | MX Series: bbe-smgd process crash upon execution of specific CLI commands | MEDIUM 6.9 | 0.18% | – | |
| CVE-2024-30380 | Junos OS (SRX firewalls) | l2cpd crash upon receipt of a specific TLV | HIGH 7.1 | 0.31% | – | |
| CVE-2024-21619 | Junos OS (SRX firewalls) | SRX Series and EX Series: J-Web - unauthenticated access to temporary files containing sensitive information | MEDIUM 5.3 | 0.88% | – | |
| CVE-2024-21620 | Junos OS (SRX firewalls) | SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS | HIGH 8.8 | 0.91% | – | |
| CVE-2023-36842 | Junos OS (SRX firewalls) | jdhcpd will hang on receiving a specific DHCP packet | MEDIUM 6.5 | 0.29% | – | |
| CVE-2024-21585 | Junos OS (SRX firewalls) | BGP session flaps on NSR-enabled devices can cause rpd crash | MEDIUM 5.9 | 0.63% | – | |
| CVE-2024-21587 | Junos OS (SRX firewalls) | MX Series: Memory leak in bbe-smgd process if BFD liveness detection for DHCP subscribers is enabled | MEDIUM 6.5 | 0.28% | – | |
| CVE-2024-21591 | Junos OS (SRX firewalls) | SRX Series and EX Series: Security Vulnerability in J-web allows a preAuth Remote Code Execution | CRITICAL 9.8 | 18% | – | |
| CVE-2024-21594 | Junos OS (SRX firewalls) | SRX 5000 Series: Repeated execution of a specific CLI command causes a flowd crash | MEDIUM 5.5 | 0.17% | – | |
| CVE-2024-21595 | Junos OS (SRX firewalls) | EX4100, EX4400, EX4600, QFX5000 Series: A high rate of specific ICMP traffic will cause the PFE to hang | HIGH 7.5 | 0.54% | – | |
| CVE-2024-21596 | Junos OS (SRX firewalls) | A specific BGP UPDATE message will cause a crash in the backup Routing Engine in NSR-enabled devices | MEDIUM 5.3 | 0.54% | – | |
| CVE-2024-21597 | Junos OS (SRX firewalls) | MX Series: In an AF scenario traffic can bypass configured lo0 firewall filters | MEDIUM 5.3 | 0.38% | – | |
| CVE-2024-21599 | Junos OS (SRX firewalls) | MX Series: MPC3E memory leak with PTP configuration | MEDIUM 6.5 | 0.29% | – | |
| CVE-2024-21600 | Junos OS (SRX firewalls) | PTX Series: In an FTI scenario MPLS packets hitting reject next-hop will cause a host path wedge condition | MEDIUM 6.5 | 0.32% | – | |
| CVE-2024-21601 | Junos OS (SRX firewalls) | SRX Series: Due to an error in processing TCP events flowd will crash | MEDIUM 5.9 | 0.45% | – | |
| CVE-2024-21603 | Junos OS (SRX firewalls) | MX Series: Gathering statistics in a scaled SCU/DCU configuration will lead to a device crash | MEDIUM 6.5 | 0.51% | – | |
| CVE-2024-21606 | Junos OS (SRX firewalls) | SRX Series: When "tcp-encap" is configured and specific packets are received flowd will crash | HIGH 7.5 | 0.56% | – | |
| CVE-2024-21607 | Junos OS (SRX firewalls) | MX Series and EX9200 Series: If the "tcp-reset" option used in an IPv6 filter, matched packets are accepted instead of rejected | MEDIUM 5.3 | 0.31% | – | |
| CVE-2024-21611 | Junos OS (SRX firewalls) | In a jflow scenario continuous route churn will cause a memory leak and eventually an rpd crash | HIGH 7.5 | 0.59% | – | |
| CVE-2024-21613 | Junos OS (SRX firewalls) | A link flap causes patroot memory leak which leads to rpd crash | MEDIUM 6.5 | 0.28% | – | |
| CVE-2024-21614 | Junos OS (SRX firewalls) | A specific query via DREND causes rpd crash | HIGH 7.5 | 0.69% | – | |
| CVE-2024-21616 | Junos OS (SRX firewalls) | MX Series and SRX Series: Processing of a specific SIP packet causes NAT IP allocation to fail | HIGH 7.5 | 0.53% | – | |
| CVE-2024-21617 | Junos OS (SRX firewalls) | BGP flap on NSR-enabled devices causes memory leak | MEDIUM 6.5 | 0.28% | – | |
| CVE-2023-36851 | Junos OS (SRX firewalls) | SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files | MEDIUM 5.3 | 1.1% | Yes | |
| CVE-2023-36844 | Junos OS (SRX firewalls) | EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables | MEDIUM 5.3 | 90% | Yes | |
| CVE-2023-36845 | Junos OS (SRX firewalls) | EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable | CRITICAL 9.8 | 95% | Yes | |
| CVE-2023-36846 | Junos OS (SRX firewalls) | SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files | MEDIUM 5.3 | 93% | Yes | |
| CVE-2023-36847 | Junos OS (SRX firewalls) | EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files | MEDIUM 5.3 | 83% | Yes | |
| CVE-2020-1631 | Junos OS (SRX firewalls) | Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services | HIGH 8.8 | 4.8% | Yes | |
| CVE-2015-7755 | ScreenOS | ScreenOS Improper Authentication | CRITICAL 9.8 | 61% | Yes |
Sources: Juniper Networks security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.