By publication date

Exploited and new serious CVEs: October 2026

8,324 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 43 of 84

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-101941No exploit	Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabledjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101942No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is usedjuniper networks · junos os · CWE-130 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101943No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configuredjuniper networks · junos os · CWE-20 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101944No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is usedjuniper networks · junos os · CWE-190 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101945No exploit	Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabledjuniper networks · junos os · CWE-190 Pre-auth Memory safety	High8.7	—	0.5%	Oct 14, 2026
34Monitor	CVE-2026-101948No exploit	Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
37Monitor	CVE-2026-101950No exploit	Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabledjuniper networks · junos os · CWE-122 Pre-auth Memory safety	Critical9.3	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-101951No exploit	Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertisedjuniper networks · junos os · CWE-1288 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-101955No exploit	Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is usedjuniper networks · junos os · CWE-121 pre-auth RCE Memory safety	Critical9.2	—	0.5%	Oct 14, 2026
37Monitor	CVE-2026-101956No exploit	Junos OS: Unauthorized root command execution when J-Web is enabledjuniper networks · junos os · CWE-287 pre-auth RCE Auth bypass	Critical9.3	—	0.7%	Oct 14, 2026
34Monitor	CVE-2026-101957No exploit	Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is usedjuniper networks · junos os · CWE-665 Pre-auth	High8.7	—	0.5%	Oct 14, 2026
28Monitor	CVE-2026-101960No exploit	Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabledjuniper networks · junos os evolved · CWE-787 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-101965No exploit	Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabledjuniper networks · junos os evolved · CWE-134	High8.7	—	0.6%	Oct 14, 2026
35Monitor	CVE-2026-101966No exploit	Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of servicejuniper networks · junos os evolved · CWE-134 Pre-auth	High8.8	—	0.4%	Oct 14, 2026
38Monitor	CVE-2026-101967No exploit	Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is usedjuniper networks · junos os evolved · CWE-78 pre-auth RCE Command injection	Critical9.3	—	3.9%	Oct 14, 2026
28Monitor	CVE-2026-101969No exploit	Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabledjuniper networks · junos os · CWE-20 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101970No exploit	Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is usedjuniper networks · junos os · CWE-416 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101971No exploit	Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabledjuniper networks · junos os · CWE-770 Pre-auth Denial of service	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-101973No exploit	Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-101974No exploit	Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is usedjuniper networks · junos os · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-101977No exploit	Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
35Monitor	CVE-2026-101978No exploit	Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is usedjuniper networks · junos os evolved · CWE-78 pre-auth RCE Command injection	High8.7	—	3.9%	Oct 14, 2026
37Monitor	CVE-2026-101980No exploit	Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabledjuniper networks · junos os · CWE-191 Pre-auth Memory safety	Critical9.3	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-101984No exploit	Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configuredjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101985No exploit	Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabledjuniper networks · junos os evolved · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
37Monitor	CVE-2026-101986No exploit	Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI executionjuniper · junos os evolved · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.5%	Oct 14, 2026
28Monitor	CVE-2026-101987No exploit	Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is usedjuniper networks · junos os · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101988No exploit	Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabledjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101989No exploit	Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
37Monitor	CVE-2026-101990No exploit	Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertisedjuniper · junos os evolved · CWE-121 Pre-auth Memory safety	Critical9.3	—	0.5%	Oct 14, 2026
28Monitor	CVE-2026-101992No exploit	Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is usedjuniper networks · junos os · CWE-20 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101993No exploit	Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is usedjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101994No exploit	Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crashjuniper networks · junos os · CWE-130 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-101996No exploit	Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configuredjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
36Monitor	CVE-2026-101997No exploit	Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authenticationjuniper networks · junos os · CWE-89 pre-auth RCE SQL injection	Critical9.2	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-101999No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102000No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102011No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102012No exploit	Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabledjuniper networks · junos os evolved · CWE-617 Pre-auth	High8.7	—	0.5%	Oct 14, 2026
34Monitor	CVE-2026-102014No exploit	Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is usedjuniper networks · junos os · CWE-121 Pre-auth Memory safety	High8.7	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-102015No exploit	Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is usedjuniper networks · junos os · CWE-122 Pre-auth Memory safety	High8.7	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-102016No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabledjuniper networks · junos os · CWE-1284 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102017No exploit	Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabledjuniper networks · junos os · CWE-787 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102018No exploit	Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabledjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102019No exploit	Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabledjuniper networks · junos os · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102020No exploit	Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabledjuniper networks · junos os · CWE-617 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102021No exploit	Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabledjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102022No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabledjuniper networks · junos os · CWE-617 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102023No exploit	Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are usedjuniper networks · junos os evolved · CWE-617 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102024No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is usedjuniper networks · junos os · CWE-190 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102025No exploit	Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are usedjuniper networks · junos os · CWE-762 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102026No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is usedjuniper networks · junos os · CWE-664 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102027No exploit	Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processedjuniper networks · junos os · CWE-131 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102028No exploit	Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.5%	Oct 14, 2026
34Monitor	CVE-2026-102029No exploit	Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansionjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
34Monitor	CVE-2026-102030No exploit	Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is usedjuniper networks · junos os · CWE-459 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
38Monitor	CVE-2026-102031No exploit	Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabledjuniper networks · junos os evolved · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.1%	Oct 14, 2026
28Monitor	CVE-2026-102032No exploit	Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are presentjuniper networks · junos os · CWE-401 Pre-auth Denial of service	High7.1	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-102033No exploit	Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabledjuniper networks · junos os · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102034No exploit	Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102035No exploit	Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102036No exploit	Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of servicejuniper networks · junos os · CWE-190 Pre-auth Memory safety	High8.7	—	0.4%	Oct 14, 2026
36Monitor	CVE-2026-102037No exploit	Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is usedjuniper networks · junos os · CWE-91 Pre-auth	Critical9.2	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102039No exploit	Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102040No exploit	Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102041No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102042No exploit	Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102043No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabledjuniper networks · junos os · CWE-197 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102044No exploit	Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabledjuniper networks · junos os · CWE-617 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102045No exploit	Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabledjuniper networks · junos os evolved · CWE-787 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102046No exploit	Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is usedjuniper networks · junos os · CWE-835 Pre-auth Denial of service	High8.7	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102047No exploit	Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is usedjuniper networks · junos os · CWE-1288 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102048No exploit	Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabledjuniper networks · junos os · CWE-770 Pre-auth Denial of service	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102049No exploit	Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabledjuniper networks · junos os · CWE-121 pre-auth RCE Memory safety	High8.7	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-102050No exploit	Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabledjuniper networks · junos os · CWE-121 Pre-auth Memory safety	High8.7	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102051No exploit	Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabledjuniper networks · junos os · CWE-401 Pre-auth Denial of service	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102052No exploit	Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is usedjuniper networks · junos os · CWE-121 pre-auth RCE Memory safety	High8.7	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-102055No exploit	Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabledjuniper networks · junos os · CWE-121 pre-auth RCE Memory safety	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-102056No exploit	Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabledjuniper networks · junos os · CWE-125 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102057No exploit	Junos OS: An attacker causes DHCP service disruption during DHCP client operationjuniper networks · junos os · CWE-121 Pre-auth Memory safety	High8.7	—	0.3%	Oct 14, 2026
28Monitor	CVE-2026-102058No exploit	Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
35Monitor	CVE-2026-102059No exploit	Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes sjuniper networks · junos os · CWE-78 pre-auth RCE Command injection	High8.7	—	3.8%	Oct 14, 2026
28Monitor	CVE-2026-102060No exploit	Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is usedjuniper networks · junos os · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102061No exploit	Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is usedjuniper networks · junos os · CWE-121 pre-auth RCE Memory safety	High8.7	—	0.3%	Oct 14, 2026
36Monitor	CVE-2026-102062No exploit	Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is usedjuniper networks · junos os · CWE-134 pre-auth RCE	Critical9.2	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102063No exploit	Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is usedjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
34Monitor	CVE-2026-102064No exploit	Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is usedjuniper networks · junos os · CWE-617 Pre-auth	High8.7	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-102065No exploit	Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabledjuniper networks · junos os · CWE-1284 Pre-auth	High8.7	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102066No exploit	Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabledjuniper networks · junos os · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102067No exploit	Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is usedjuniper networks · junos os · CWE-1284 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
36Monitor	CVE-2026-102068No exploit	Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is usedjuniper networks · junos os evolved · CWE-121 Pre-auth Memory safety	Critical9.2	—	0.7%	Oct 14, 2026
34Monitor	CVE-2026-102069No exploit	Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabledjuniper networks · junos os · CWE-121 Pre-auth Memory safety	High8.7	—	0.3%	Oct 14, 2026
36Monitor	CVE-2026-102070No exploit	Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is usedjuniper networks · junos os · CWE-617 Pre-auth	Critical9.2	—	0.4%	Oct 14, 2026
28Monitor	CVE-2026-102071No exploit	Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabledjuniper networks · junos os · CWE-617 Pre-auth	High7.1	—	0.2%	Oct 14, 2026
28Monitor	CVE-2026-102072No exploit	Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledjuniper networks · junos os · CWE-409	High7.1	—	0.4%	Oct 14, 2026
32Monitor	CVE-2026-102078No exploit	Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crashjuniper networks · junos os · CWE-416 Pre-auth Memory safety Race condition	High8.2	—	0.3%	Oct 14, 2026
34Monitor	CVE-2026-102079No exploit	Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injectionjuniper networks · junos os · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	0.6%	Oct 14, 2026
34Monitor	CVE-2026-102081No exploit	Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimatjuniper networks · junos os · CWE-401 Pre-auth Denial of service	High8.7	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-102082No exploit	Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occursjuniper networks · junos os · CWE-166 Pre-auth	High8.2	—	0.3%	Oct 14, 2026
32Monitor	CVE-2026-102083No exploit	Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crashjuniper networks · junos os · CWE-413 Pre-auth	High8.2	—	0.3%	Oct 14, 2026

CVE-2026-101941
34Monitor
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101942
34Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101943
34Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101944
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101945
34Monitor
Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101948
34Monitor
Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101950
37Monitor
Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101951
34Monitor
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101955
36Monitor
Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101956
37Monitor
Junos OS: Unauthorized root command execution when J-Web is enabled
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
juniper networks · junos osOct 14, 2026
CVE-2026-101957
34Monitor
Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101960
28Monitor
Junos OS Evolved: QFX Series: A BGP peer causes an rpd crash when global load balancing is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-101965
34Monitor
Junos OS Evolved: An attacker causes telemetry disruption when network analytics telemetry is enabled
HighCVSS 8.7No exploitEPSS 0%
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-101966
35Monitor
Junos OS Evolved: A crafted analytics sensor resource causes telemetry dial-out daemon denial of service
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-101967
38Monitor
Junos OS Evolved: PTX Series: An attacker controlled DHCP response causes root-level compromise when zero-touch provisioning is used
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
- Command injection
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-101969
28Monitor
Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101970
28Monitor
Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101971
28Monitor
Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper networks · junos osOct 14, 2026
CVE-2026-101973
34Monitor
Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101974
28Monitor
Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101977
34Monitor
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101978
35Monitor
Junos OS Evolved: PTX Series: An attacker controlled gRPC response causes root-level compromise when zero-touch provisioning is used
HighCVSS 8.7No exploitEPSS 3%
- pre-auth RCE
- Command injection
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-101980
37Monitor
Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Echo is enabled
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101984
28Monitor
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101985
28Monitor
Junos OS Evolved: PTX Series: An IS-IS peer causes an rpd crash when BIER over IS-IS is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-101986
37Monitor
Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
juniper · junos os evolvedOct 14, 2026
CVE-2026-101987
28Monitor
Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101988
28Monitor
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-101989
28Monitor
Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101990
37Monitor
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper · junos os evolvedOct 14, 2026
CVE-2026-101992
28Monitor
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101993
28Monitor
Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101994
28Monitor
Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101996
28Monitor
Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-101997
36Monitor
Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- SQL injection
juniper networks · junos osOct 14, 2026
CVE-2026-101999
28Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102000
28Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102011
28Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102012
34Monitor
Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-102014
34Monitor
Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102015
34Monitor
Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102016
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102017
28Monitor
Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102018
28Monitor
Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102019
28Monitor
Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102020
34Monitor
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102021
28Monitor
Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102022
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102023
34Monitor
Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-102024
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102025
34Monitor
Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102026
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102027
34Monitor
Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102028
34Monitor
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102029
34Monitor
Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102030
34Monitor
Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102031
38Monitor
Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-102032
28Monitor
Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper networks · junos osOct 14, 2026
CVE-2026-102033
28Monitor
Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102034
28Monitor
Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102035
28Monitor
Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102036
34Monitor
Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102037
36Monitor
Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102039
28Monitor
Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102040
28Monitor
Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102041
28Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102042
28Monitor
Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102043
28Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102044
34Monitor
Junos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102045
28Monitor
Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-102046
34Monitor
Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper networks · junos osOct 14, 2026
CVE-2026-102047
28Monitor
Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102048
28Monitor
Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper networks · junos osOct 14, 2026
CVE-2026-102049
34Monitor
Junos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102050
34Monitor
Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102051
28Monitor
Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper networks · junos osOct 14, 2026
CVE-2026-102052
34Monitor
Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102055
34Monitor
Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102056
28Monitor
Junos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102057
34Monitor
Junos OS: An attacker causes DHCP service disruption during DHCP client operation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102058
28Monitor
Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102059
35Monitor
Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes s
HighCVSS 8.7No exploitEPSS 3%
- pre-auth RCE
- Command injection
juniper networks · junos osOct 14, 2026
CVE-2026-102060
28Monitor
Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102061
34Monitor
Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102062
36Monitor
Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
juniper networks · junos osOct 14, 2026
CVE-2026-102063
28Monitor
Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102064
34Monitor
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102065
34Monitor
Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102066
28Monitor
Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102067
28Monitor
Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102068
36Monitor
Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos os evolvedOct 14, 2026
CVE-2026-102069
34Monitor
Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
juniper networks · junos osOct 14, 2026
CVE-2026-102070
36Monitor
Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102071
28Monitor
Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102072
28Monitor
Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled
HighCVSS 7.1No exploitEPSS 0%
juniper networks · junos osOct 14, 2026
CVE-2026-102078
32Monitor
Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
- Race condition
juniper networks · junos osOct 14, 2026
CVE-2026-102079
34Monitor
Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
juniper networks · junos osOct 14, 2026
CVE-2026-102081
34Monitor
Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimat
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
juniper networks · junos osOct 14, 2026
CVE-2026-102082
32Monitor
Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026
CVE-2026-102083
32Monitor
Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
juniper networks · junos osOct 14, 2026