CVE-2026-33789 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated BGP peer to cause denial of service and potentially execute root-level commands via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 score is 9.8, indicating a critical severity level.
CVE-2026-102185 is an infinite loop vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This flaw occurs during EVPN multihoming with preference-based designated-forwarder election and can be triggered remotely by an attacker. Exploitation leads to a denial of service condition by causing the affected process to hang indefinitely. The vulnerability has a high severity rating with a CVSS score of 7.5. Multiple versions of Junos OS and Junos OS Evolved are affected, spanning several release trains and variants. No known exploits are reported in the wild. No explicit patch or remediation information is provided in the input data.
CVE-2026-102184 is a high-severity vulnerability in Juniper Networks Junos OS and Junos Evolved platforms. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). A configured EVPN signaling peer can send a malformed SRv6 structure in an EVPN route update, causing the rpd process to crash. This results in a denial of service affecting routing adjacencies. The vulnerability affects multiple specific versions of Junos OS and Junos Evolved as detailed in the affectedVersions field.
CVE-2026-102183 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a configured BGP EVPN peer to cause an rpd crash via a malformed NLRI. This results in a denial of service condition. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild at this time.
CVE-2026-102182 is a critical stack-based buffer overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series devices. It allows an unauthenticated network attacker to execute code as root by sending specially crafted IKE certificate-based packets. The vulnerability requires IKE to be enabled with an RSA-signature IKE policy to be exploitable. Multiple versions of Junos OS on MX Series are affected, specifically versions before certain fixed releases in the 21.x through 26.x release trains.
CVE-2026-102180 is a stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a specially crafted BGP route attribute during an active BGP RIB streaming telemetry subscription. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved starting from 22.1R1 and later, up to certain patched releases. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-102179 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It affects systems with a configured BGP EVPN peer and the l2vpn-evpn RIB telemetry sensor subscribed. Exploitation can cause the rpd daemon to crash, resulting in denial of service and interruption of routing protocols until recovery.
CVE-2026-102178 is a critical stack-based buffer overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP flowspec peer to cause routing-engine compromise or routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases.
CVE-2026-102177 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 7.6, indicating high severity.
CVE-2026-102176 is a high-severity buffer overflow vulnerability in the SDK service process of Juniper Networks Junos OS. It allows an unauthenticated network attacker to cause denial of service or potentially compromise the Routing Engine by sending crafted packets when the SDK service and a JDAF routing instance are enabled. The vulnerability affects multiple Junos OS versions prior to specific patch releases.
CVE-2026-102175 is a critical heap-based buffer overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service by sending a crafted frame over the service-deployment TCP connection. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. No known exploits in the wild have been reported. The CVSS v3.1 score is 9.8, indicating a critical severity level.
CVE-2026-102174 is a stack-based buffer overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series. It allows an authenticated remote-access VPN client to execute code with root privileges or cause a denial of service. The vulnerability affects multiple Junos OS versions prior to specific patch releases. The CVSS score is 8.8, indicating high severity.
CVE-2026-102061 is a stack-based buffer overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to execute arbitrary code as root by sending a crafted DHCP SZTP bootstrap message. This vulnerability affects only platforms that support Secure-ZTP. The issue has a high severity with a CVSS score of 8.8.
CVE-2026-102060 is a NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series. An unauthenticated adjacent attacker can cause a denial of service by sending an IGMPv3 membership report on a directly connected network. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5 (medium severity) with no confidentiality or integrity impact, only availability impact.
CVE-2026-102059 is an OS command injection vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX, SRX, and QFX Series devices. An adjacent unauthenticated attacker can exploit this flaw by using a rogue DHCP server to execute arbitrary commands with root privileges. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. It has a high severity with a CVSS score of 8.8. No known exploits in the wild have been reported. The vendor has not provided explicit patch links in the provided data, so patch status should be verified with Juniper advisories.
CVE-2026-102058 is a reachable assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms. It allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon through crafted BFD session traffic. The vulnerability has a CVSS v3.1 score of 6.5, indicating medium severity. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided.
CVE-2026-102057 is a stack-based buffer overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS. It allows an unauthenticated adjacent attacker to cause a denial of service by sending a crafted DHCP client response. This affects DHCP client operations and can disrupt DHCP, relay, and zero-touch-provisioning services. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS prior to specific patch releases are affected. No known exploits are reported in the wild at this time.
CVE-2026-102056 is a high-severity out-of-bounds read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated attacker on an adjacent network can send a crafted CFM message to a configured interface, causing the daemon to crash and potentially disclose limited process memory. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS 3.1 base score is 7.1, indicating a high impact primarily due to availability disruption and limited confidentiality loss.
CVE-2026-102055 is a stack-based buffer overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms. It allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service by sending a specific CFM message to a configured down-MEP with enhanced CFM mode enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 8.8, indicating high severity.
CVE-2026-102054 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the L2ALM component. It involves improper handling of length parameter inconsistencies that allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory by sending VXLAN overlay-ping traffic to a local VTEP. The vulnerability does not impact confidentiality, integrity, or availability beyond limited information disclosure. Multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases are affected.