CVE-2026-101996 is a reachable assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP. This flaw allows an adjacent attacker to cause a denial of service by sending an inconsistent ICCP peer message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-102064 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker to cause a crash of the rpd process by sending malformed BGP MCAST-VPN updates from a configured eBGP peer. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The vulnerability has a CVSS score of 7.5, indicating high severity due to its potential to cause denial of service via process crash. No known exploits are reported in the wild at this time. Juniper Networks has published this vulnerability but no explicit patch links are provided in the data.
CVE-2026-102066 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). An adjacent unauthenticated attacker can cause a denial of service by sending a malformed RSVP packet when RSVP is enabled on the receiving interface.
CVE-2026-102071 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can exploit this vulnerability by sending a specific RSVP packet, causing a denial of service (DoS). The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 6.5, indicating a medium severity level. There is no indication of known exploits in the wild, and no official patch links are provided in the input data.
CVE-2026-101950 is a critical heap-based buffer overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series devices. An unauthenticated network attacker can exploit this vulnerability by sending malformed IPv4 packets to an interface configured for Secure Vector Routing, potentially causing denial of service and compromising confidentiality and integrity.
CVE-2026-101955 is a high-severity stack-based buffer overflow vulnerability in the UTM Anti-Spam SBL feature of Juniper Networks Junos OS on SRX series devices. It allows an unauthenticated remote attacker to cause arbitrary code execution or denial of service by sending a malformed DNS packet when Anti-Spam SBL inspection is enabled.
CVE-2026-101997 is a high-severity SQL Injection vulnerability in the ipfd component of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated network attacker to execute code with root privileges via a configured Security Intelligence feed connection. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 8.1, indicating a significant risk of confidentiality, integrity, and availability impact.
CVE-2026-102062 is a high-severity vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series devices. It involves an externally-controlled format string flaw that allows an unauthenticated network attacker to execute code with root privileges by exploiting a compromised or impersonated HTTPS feed server configuration. The vulnerability affects multiple Junos OS versions prior to specific fixed releases. The CVSS score is 8.1, indicating a significant risk. No known exploits are reported in the wild at this time.
CVE-2026-102078 is a Use After Free vulnerability in the packet forwarding engine of Juniper Networks Junos OS on SRX Series devices. It can be triggered by an unauthenticated, network-based attacker when web filtering for TCP traffic is enabled and a high volume of DNS requests occurs. This causes a race condition that leads to a flowd process crash and restart, resulting in a temporary Denial-of-Service (DoS) until automatic recovery. The vulnerability affects multiple Junos OS versions prior to specific fixed releases. A patch is available to address this issue.
CVE-2026-102079 is an OS command injection vulnerability in the CLI of Juniper Networks Junos OS. A local, low privileged attacker can exploit a flaw in the 'request csds' command, which fails to properly sanitize user input, allowing execution of arbitrary commands with root privileges. This can lead to full system compromise. The vulnerability affects Junos OS versions 24.4 prior to 24.4R2-S4, 25.2 prior to 25.2R2-S1, and 25.4 prior to 25.4R1-S3. Versions before 24.4R1 are not affected. A patch is available to remediate this issue. The CVSS v3.1 base score is 7.8, indicating high severity.
CVE-2026-102080 is an improper resource locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series devices. An unauthenticated, logically adjacent attacker can cause a denial-of-service (DoS) by sending malformed SyncE or PTP messages, triggering false alarms and persistent route engine switchovers. This issue is due to a race condition and affects multiple Junos OS versions prior to specific fixed releases.
CVE-2026-102081 is a high-severity vulnerability in Juniper Networks Junos OS affecting SRX and MX Series devices. It involves a memory leak in the packet forwarding engine (PFE) when certain application services are configured and a high connection churn occurs. This can lead to exhaustion of PFE memory and cause a complete denial-of-service (DoS). The issue affects specific Junos OS versions from 23.4R2-S3 up to but not including 23.4R2-S7, 24.2R2 up to but not including 24.2R2-S3, 24.4 up to but not including 24.4R2-S3, and version 25.2. A patch is available to address this vulnerability.
CVE-2026-102082 is a medium severity vulnerability in Juniper Networks Junos OS on SRX Series devices. It involves improper handling of a missing special element in the SSL plugin when 'ssl-proxy' is configured. An unauthenticated network attacker can send a malformed TLS message during a TLS session resumption attempt, causing an invalid pointer access and a Packet Forwarding Engine (PFE) crash. This results in a temporary denial-of-service (DoS) due to loss of traffic forwarding until automatic recovery occurs. The vulnerability affects multiple Junos OS versions prior to specific patched releases.
CVE-2026-102083 is an improper resource locking vulnerability in the UTM WebFiltering subsystem of Juniper Networks Junos OS on SRX Series devices. When the WebFiltering cloud server is unreachable, sustained HTTP traffic can cause the UTM process to crash and restart, resulting in a denial-of-service (DoS) condition. This affects both NextGeneration WebFiltering (NGWF) and Enhanced WebFiltering (EWF).
CVE-2026-102084 is a high-severity vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series devices. It involves improper validation of syntactic correctness of input, leading to a buffer overflow when processing malformed attributes in AutoDiscovery VPN (ADVPN) messages from peers. Exploitation requires the attacker to be authenticated and possess or have compromised the shared secret to impersonate a peer. Successful exploitation can result in remote code execution and complete control over the affected device. Multiple versions of Junos OS on SRX Series are affected, with patches available in specified fixed versions.
CVE-2026-102085 is a vulnerability in Juniper Networks Junos OS Evolved where a process intended for internal communication is improperly exposed over the network due to incorrect initialization. This allows an unauthenticated attacker to access the process via an open port, causing limited information disclosure and increased CPU usage, impacting device availability. The issue affects multiple versions of Junos OS Evolved prior to specific fixed releases across several version branches.
CVE-2026-102086 is a NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS) by triggering an FPC crash. The issue occurs when multiple DNS queries in a single flow session involve both a Security Intelligence feed match and a DNS Domain Generation Algorithm analysis, leading to an error in asynchronous logging. This vulnerability affects multiple versions of Junos OS prior to specific fixed releases.
CVE-2026-102087 is a vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It involves an incomplete blacklist of disallowed inputs that allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS) by crashing the rpd process. The crash occurs when a specific, valid, optional, non-transitive BGP update is received during BGP traffic engineering, causing the rpd to restart and temporarily disrupt traffic until routing reconverges. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to certain fixed releases.
CVE-2026-103993 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can send a crafted set of BGP communities including a graceful-shutdown sender community to cause the rpd process to crash, resulting in a denial-of-service (DoS). This affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases.
CVE-2026-101991 is a low-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper handling of length parameter inconsistency in BGP-LS sessions with the traffic-engineering address family enabled. A configured BGP-LS peer can send a malformed UPDATE message that may cause heap data disclosure. The vulnerability does not impact integrity or availability and requires high attack complexity with no privileges and no user interaction.