CVE-2026-102081 is a high-severity vulnerability in Juniper Networks Junos OS affecting SRX and MX Series devices. It involves a memory leak in the packet forwarding engine (PFE) when certain application services are configured and a high connection churn occurs. This can lead to exhaustion of PFE memory and cause a complete denial-of-service (DoS). The issue affects specific Junos OS versions from 23.4R2-S3 up to but not including 23.4R2-S7, 24.2R2 up to but not including 24.2R2-S3, 24.4 up to but not including 24.4R2-S3, and version 25.2. A patch is available to address this vulnerability.
CVE-2026-102082 is a medium severity vulnerability in Juniper Networks Junos OS on SRX Series devices. It involves improper handling of a missing special element in the SSL plugin when 'ssl-proxy' is configured. An unauthenticated network attacker can send a malformed TLS message during a TLS session resumption attempt, causing an invalid pointer access and a Packet Forwarding Engine (PFE) crash. This results in a temporary denial-of-service (DoS) due to loss of traffic forwarding until automatic recovery occurs. The vulnerability affects multiple Junos OS versions prior to specific patched releases.
CVE-2026-102083 is an improper resource locking vulnerability in the UTM WebFiltering subsystem of Juniper Networks Junos OS on SRX Series devices. When the WebFiltering cloud server is unreachable, sustained HTTP traffic can cause the UTM process to crash and restart, resulting in a denial-of-service (DoS) condition. This affects both NextGeneration WebFiltering (NGWF) and Enhanced WebFiltering (EWF).
CVE-2026-102084 is a high-severity vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series devices. It involves improper validation of syntactic correctness of input, leading to a buffer overflow when processing malformed attributes in AutoDiscovery VPN (ADVPN) messages from peers. Exploitation requires the attacker to be authenticated and possess or have compromised the shared secret to impersonate a peer. Successful exploitation can result in remote code execution and complete control over the affected device. Multiple versions of Junos OS on SRX Series are affected, with patches available in specified fixed versions.
CVE-2026-102085 is a vulnerability in Juniper Networks Junos OS Evolved where a process intended for internal communication is improperly exposed over the network due to incorrect initialization. This allows an unauthenticated attacker to access the process via an open port, causing limited information disclosure and increased CPU usage, impacting device availability. The issue affects multiple versions of Junos OS Evolved prior to specific fixed releases across several version branches.
CVE-2026-102086 is a NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS) by triggering an FPC crash. The issue occurs when multiple DNS queries in a single flow session involve both a Security Intelligence feed match and a DNS Domain Generation Algorithm analysis, leading to an error in asynchronous logging. This vulnerability affects multiple versions of Junos OS prior to specific fixed releases.
CVE-2026-102087 is a vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It involves an incomplete blacklist of disallowed inputs that allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS) by crashing the rpd process. The crash occurs when a specific, valid, optional, non-transitive BGP update is received during BGP traffic engineering, causing the rpd to restart and temporarily disrupt traffic until routing reconverges. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to certain fixed releases.
CVE-2026-103993 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can send a crafted set of BGP communities including a graceful-shutdown sender community to cause the rpd process to crash, resulting in a denial-of-service (DoS). This affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases.
CVE-2026-101991 is a low-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper handling of length parameter inconsistency in BGP-LS sessions with the traffic-engineering address family enabled. A configured BGP-LS peer can send a malformed UPDATE message that may cause heap data disclosure. The vulnerability does not impact integrity or availability and requires high attack complexity with no privileges and no user interaction.
CVE-2026-101986 is a critical improper authentication vulnerability in the J-Web interface of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request. The vulnerability affects multiple versions across Junos OS and Junos OS Evolved releases prior to specific fixed versions. The CVSS v3.1 base score is 9.8, indicating a critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.
CVE-2026-101951 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of consistency within input, specifically in handling BGP MCAST-TREE updates. A network-adjacent configured BGP peer can exploit this by sending a specially malformed BGP MCAST-TREE update, causing a denial of service due to attempted readvertisement of the malformed NLRI.
CVE-2026-101957 is an improper initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote BGP peer to cause the rpd process to crash by sending an LLGR-stale route update that is readvertised to a non-LLGR peer group. This vulnerability can lead to denial of service conditions due to rpd crashes.
CVE-2026-102065 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled. This can lead to denial of service by crashing the routing daemon.
CVE-2026-101974 is a vulnerability in the rpd component of Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input, allowing an adjacent OSPF peer to disclose rpd memory or cause a crash via malformed OSPF packets. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved, including specific release ranges and variants. There is no information provided about available patches or vendor advisories. No known exploits in the wild have been reported.
CVE-2026-102067 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). An adjacent unauthenticated attacker can cause a denial of service by sending a crafted RSVP packet when L2 LSP support is enabled.
CVE-2026-101995 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the l2ald daemon. It involves improper validation of specified quantity in input, allowing an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets. The vulnerability does not impact confidentiality or integrity but can cause availability disruption. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided.
CVE-2026-101948 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote unauthenticated BGP peer to cause a denial of service by sending a specific BGP FlowSpec update to an affected BGP session. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 7.5, indicating a high severity denial of service impact without confidentiality or integrity loss.
CVE-2026-101977 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured eBGP peer to cause a persistent denial of service of the routing daemon by sending a specific BGP packet when ephemeral configuration is used. This vulnerability results in a high severity denial of service condition without impacting confidentiality or integrity.
CVE-2026-101956 is a critical improper authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS. It allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the exposed J-Web interface. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges or user interaction required, and full confidentiality, integrity, and availability impact.
CVE-2026-101980 is a critical integer underflow vulnerability in the kernel of Juniper Networks Junos OS when Extended Echo is configured. An unauthenticated attacker can exploit this vulnerability remotely to cause a denial of service by crashing the kernel. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 9.8, indicating a high impact on confidentiality, integrity, and availability.