Juniper Networks vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Exploited Juniper Networks flaws

These are on CISA’s Known Exploited Vulnerabilities list, newest first. If you run any of these products, these come before everything else.

• CVE-2015-7755 Juniper ScreenOS Improper AuthenticationExploited since Oct 2, 2025 · CVSS 9.8
• CVE-2025-21590 Juniper Junos OS Improper Isolation or CompartmentalizationExploited since Mar 13, 2025 · CVSS 6.7
• CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical FunctionExploited since Nov 13, 2023 · CVSS 5.3
• CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical FunctionExploited since Nov 13, 2023 · CVSS 5.3
• CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable ModificationExploited since Nov 13, 2023 · CVSS 9.8
• CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable ModificationExploited since Nov 13, 2023 · CVSS 5.3
• CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical FunctionExploited since Nov 13, 2023 · CVSS 5.3
• CVE-2020-1631 Juniper Junos OS Path TraversalExploited since Mar 25, 2022 · CVSS 8.8

Latest high and critical flaws

• CVE-2026-106079 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart RHigh 8.8 · Oct 28, 2026
• CVE-2026-103411 An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker with local network access to cause informatHigh 7.1 · Oct 28, 2026
• CVE-2026-103410 An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unauthenticated remote attacker to cause a dHigh 7.5 · Oct 28, 2026
• CVE-2026-103409 A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated network-based attacker to obtainCritical 9.8 · Oct 28, 2026
• CVE-2026-103408 A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthenticated attacker on the local network to achHigh 8.8 · Oct 28, 2026
• CVE-2026-103407 An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart ConducHigh 8.8 · Oct 28, 2026
• CVE-2026-103406 An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks Session Smart Conductor allowCritical 9.8 · Oct 28, 2026
• CVE-2026-103403 An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessManager in Juniper Networks Session Smart RHigh 8.8 · Oct 28, 2026
• CVE-2026-103402 An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Session Smart Conductor allows an attacker High 8.8 · Oct 28, 2026
• CVE-2026-103401 An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart RouHigh 8.8 · Oct 28, 2026
• CVE-2026-102077 An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 High 8.7 · Oct 14, 2026
• CVE-2026-101983 A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker toCritical 9.3 · Oct 14, 2026
• CVE-2026-101982 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPNCritical 9.3 · Oct 14, 2026
• CVE-2026-101981 A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjHigh 8.7 · Oct 14, 2026
• CVE-2026-101979 A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execuHigh 8.7 · Oct 14, 2026
• CVE-2026-101976 An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not neHigh 8.7 · Oct 14, 2026
• CVE-2026-101975 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to causeHigh 7.1 · Oct 14, 2026
• CVE-2026-101972 An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticatedHigh 7.1 · Oct 14, 2026
• CVE-2026-101964 A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause High 7.1 · Oct 14, 2026
• CVE-2026-101963 An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to causHigh 8.7 · Oct 14, 2026
• CVE-2026-101962 An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved alloHigh 8.7 · Oct 14, 2026
• CVE-2026-101961 A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP pHigh 8.7 · Oct 14, 2026
• CVE-2026-101959 A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS EvHigh 7.1 · Oct 14, 2026
• CVE-2026-101954 An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved alCritical 9.3 · Oct 14, 2026
• CVE-2026-101952 An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows aHigh 8.7 · Oct 14, 2026