CVE-2026-101979 is a stack-based buffer overflow vulnerability in the authd component of Juniper Networks Junos OS and Junos OS Evolved. It allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a crafted SNMP packet, when SNMP and AAA are enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS score is 8.8, indicating high severity.
CVE-2026-101976 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an eBGP peer that has not negotiated four-octet-AS capability to send a specially crafted BGP update, causing a denial-of-service (DoS) condition. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS v3.1 score is 7.5, indicating high severity due to the potential for service disruption without requiring privileges or user interaction.
CVE-2026-101975 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent OSPF peer to cause a denial of service via OSPF traffic when OSPF Source Packet Routing best-route Prefix-SID installation is configured. The vulnerability has a CVSS 3.1 score of 6.5, indicating medium severity. Multiple versions of Junos OS and Junos OS Evolved are affected, spanning several release series. No known exploits are reported in the wild.
CVE-2026-101972 is an integer overflow or wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can exploit this flaw by sending specific OSPFv2 packets on an OSPF-enabled interface to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS 3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102077 is a high-severity vulnerability in Juniper Networks Junos OS on MX Series with SPC3 line-cards. It involves improper handling of malformed IPv6 packets when source NAT is configured, causing the device to allocate NAT resources unnecessarily. This leads to session or resource exhaustion, resulting in a denial-of-service (DoS) condition that requires a device reboot to recover.
CVE-2026-33798 is a high-severity stack-based buffer overflow vulnerability in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. It allows an L2-adjacent attacker to execute arbitrary code with root privileges via high-availability fabric traffic. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. No known exploits are reported in the wild. The CVSS v3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-33796 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS v3.1 base score is 9.8, indicating a critical severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. There are no known exploits in the wild at this time. Juniper Networks has not provided explicit patch links in the input data, so patch status should be verified with the vendor advisory.
CVE-2026-33795 is a numeric truncation error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated network-based attacker to cause a denial of service by sending a BGP Prefix-SID route advertisement that is then re-advertised. The vulnerability affects multiple versions starting from 20.4R1 and later, including various specific release ranges for both Junos OS and Junos OS Evolved.
CVE-2026-33792 is a critical stack-based buffer overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated network attacker to execute code as root or cause a denial of service by sending a crafted packet on a configured GRE tunnel. The vulnerability affects multiple Junos OS versions prior to specific patch releases. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges or user interaction required, and impacts confidentiality, integrity, and availability.
CVE-2026-33789 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated BGP peer to cause denial of service and potentially execute root-level commands via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 score is 9.8, indicating a critical severity level.
CVE-2026-102185 is an infinite loop vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This flaw occurs during EVPN multihoming with preference-based designated-forwarder election and can be triggered remotely by an attacker. Exploitation leads to a denial of service condition by causing the affected process to hang indefinitely. The vulnerability has a high severity rating with a CVSS score of 7.5. Multiple versions of Junos OS and Junos OS Evolved are affected, spanning several release trains and variants. No known exploits are reported in the wild. No explicit patch or remediation information is provided in the input data.
CVE-2026-102184 is a high-severity vulnerability in Juniper Networks Junos OS and Junos Evolved platforms. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). A configured EVPN signaling peer can send a malformed SRv6 structure in an EVPN route update, causing the rpd process to crash. This results in a denial of service affecting routing adjacencies. The vulnerability affects multiple specific versions of Junos OS and Junos Evolved as detailed in the affectedVersions field.
CVE-2026-102183 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a configured BGP EVPN peer to cause an rpd crash via a malformed NLRI. This results in a denial of service condition. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild at this time.
CVE-2026-102182 is a critical stack-based buffer overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series devices. It allows an unauthenticated network attacker to execute code as root by sending specially crafted IKE certificate-based packets. The vulnerability requires IKE to be enabled with an RSA-signature IKE policy to be exploitable. Multiple versions of Junos OS on MX Series are affected, specifically versions before certain fixed releases in the 21.x through 26.x release trains.
CVE-2026-102180 is a stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a specially crafted BGP route attribute during an active BGP RIB streaming telemetry subscription. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved starting from 22.1R1 and later, up to certain patched releases. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-102179 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It affects systems with a configured BGP EVPN peer and the l2vpn-evpn RIB telemetry sensor subscribed. Exploitation can cause the rpd daemon to crash, resulting in denial of service and interruption of routing protocols until recovery.
CVE-2026-102178 is a critical stack-based buffer overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP flowspec peer to cause routing-engine compromise or routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases.
CVE-2026-102177 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 7.6, indicating high severity.
CVE-2026-102176 is a high-severity buffer overflow vulnerability in the SDK service process of Juniper Networks Junos OS. It allows an unauthenticated network attacker to cause denial of service or potentially compromise the Routing Engine by sending crafted packets when the SDK service and a JDAF routing instance are enabled. The vulnerability affects multiple Junos OS versions prior to specific patch releases.
CVE-2026-102175 is a critical heap-based buffer overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service by sending a crafted frame over the service-deployment TCP connection. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. No known exploits in the wild have been reported. The CVSS v3.1 score is 9.8, indicating a critical severity level.