@stackflag.bsky.socialCVE-2026-101954 - junos os
If a Junos OS or Junos OS Evolved device has the J-Web web management interface turned on, anyone on the same network can connect to it without a password and gain full…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-33796 - junos os
If BMP route monitoring is enabled, a malicious BGP neighbor can overflow a buffer in the routing daemon and execute any command with full system privileges. This could let…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-33792 - junos os
Juniper Networks' Junos OS running on SRX firewalls can be attacked when a GRE tunnel is set up. A specially crafted network packet can let an outside attacker run commands…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-33789 - junos os
Juniper's Junos OS and Junos OS Evolved can be forced to stop working if a network device that talks to them sends specially crafted routing information while the BGP…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102182 - junos os
Juniper Networks' Junos OS on MX series routers can be tricked by specially crafted IKE certificate packets to run any code with administrator privileges. An attacker on…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102178 - junos os
Juniper's Junos OS and Junos OS Evolved have a bug in their BGP routing component that can be triggered by a specially crafted network update. If an attacker can send this…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102175 - junos os
The Junos OS and Junos OS Evolved systems have a flaw in the service‑deployment component that could let an outside attacker take control of the device or shut it down. The…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102084 - junos os
Juniper SRX firewalls that run Junos OS and use AutoDiscovery VPN can be taken over if they receive a specially malformed message from a trusted peer. An attacker who…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102070 - junos os
The TWAMP client built into Junos OS can be triggered by a specially formed network packet to shut down the rmopd service, which handles measurement traffic. An attacker on…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102062 - junos os
The Junos operating system on SRX devices uses a component that contacts an HTTPS feed server for security information. If that server is compromised or spoofed, an…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102037 - junos os
The threat‑feed feature in Junos OS on SRX firewalls can be tricked by a malicious response from the custom URL you configure. An attacker on the network could then change…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101983 - junos os
Juniper's Junos OS and Junos OS Evolved web management interface (J-Web) can be tricked into running malicious code when a virtual domain is set up. An outside attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101982 - junos os
The routing software in Juniper Junos OS and Junos OS Evolved can be tricked by a specially crafted network connection into crashing or running any code the attacker wants.…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101997 - junos os
The Junos operating system used on SRX firewalls can be tricked by a specially crafted Security Intelligence feed into executing commands with full system rights. This can…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101955 - junos os
Juniper's SRX firewalls running Junos OS may be vulnerable when the anti‑spam DNS blacklist feature is turned on. A specially crafted DNS request can cause the device to…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101990 - junos os
Juniper's Junos OS and Junos OS Evolved can stop working if a neighboring router sends a specially crafted flow‑spec update that the system tries to re‑advertise. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101950 - junos os
Junos OS running on SRX series routers can be forced to stop working if an attacker sends specially crafted IPv4 packets to an interface that has Secure Vector Routing…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101986 - junos os
The web management interface (J-Web) in Junos OS and Junos OS Evolved can be accessed without logging in, allowing an outsider to run scripts with high-level rights. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101956 - junos os
If the J-Web management interface is turned on, an attacker on the network can access it without any login and run any Junos command with full administrator rights. This…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101980 - junos os
If a Junos OS router has the Extended Echo feature turned on, a specially crafted network packet can make the system’s core software crash and restart, interrupting…
Too many irrelevant or confusing CVEs? Use stackflag.com