Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-103994 | high | 8.8 | No | A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised... | 2026-10-15 |
| CVE-2026-103993 | medium | 6.8 | No | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjace... | 2026-10-15 |
| CVE-2026-102179 | high | 7.5 | No | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attack... | 2026-10-15 |
| CVE-2026-102177 | high | 7.6 | No | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjace... | 2026-10-15 |
| CVE-2026-102087 | medium | 6.5 | No | An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved... | 2026-10-15 |
| CVE-2026-102086 | medium | 5.9 | No | A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-bas... | 2026-10-15 |
| CVE-2026-102085 | medium | 6.5 | No | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthen... | 2026-10-15 |
| CVE-2026-102084 | high | 8.1 | No | An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows a... | 2026-10-15 |
| CVE-2026-102083 | medium | 5.9 | No | An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, netwo... | 2026-10-15 |
| CVE-2026-102082 | medium | 5.9 | No | An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-... | 2026-10-15 |
| CVE-2026-102081 | high | 7.5 | No | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX... | 2026-10-15 |
| CVE-2026-102080 | medium | 5.3 | No | An Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series allows a... | 2026-10-15 |
| CVE-2026-102079 | high | 7.8 | No | An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete contr... | 2026-10-15 |
| CVE-2026-102078 | medium | 5.9 | No | A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, n... | 2026-10-15 |
| CVE-2026-102072 | medium | 6.5 | No | An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an aut... | 2026-10-15 |
| CVE-2026-102071 | medium | 6.5 | No | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthe... | 2026-10-15 |
| CVE-2026-102070 | high | 7.5 | No | A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthe... | 2026-10-15 |
| CVE-2026-102069 | high | 8.8 | No | A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation D... | 2026-10-15 |
| CVE-2026-102068 | high | 7.5 | No | A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to... | 2026-10-15 |
| CVE-2026-102062 | high | 8.1 | No | An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthen... | 2026-10-15 |