Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Priority LOW 31

An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggre…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00269 Published 2026-10-14 Fixed in 24.4R2-S5-EVO, 25.2R2-S2-EVO +4 CWE-787
Priority MEDIUM 52

An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02101 Published 2026-10-14 Fixed in 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO +7 CWE-78
Priority MEDIUM 44

A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00461 Published 2026-10-14 Fixed in 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO +7 CWE-617
Priority MEDIUM 44

A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00574 Published 2026-10-14 Fixed in 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO +7 CWE-617
Priority LOW 29

An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00151 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-787
Priority MEDIUM 41

An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure,…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00601 Published 2026-10-14 Fixed in 24.4R2-S5-EVO, 25.2R2-S2-EVO +4 CWE-134
Priority MEDIUM 49

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHC…

CVSS 4.0CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.0392 Published 2026-10-14 Fixed in 24.4R2-S5-EVO, 25.2R2-S2-EVO +4 CWE-78
Priority MEDIUM 47

A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0074 Published 2026-10-14 Fixed in 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO +7 CWE-121
Priority LOW 31

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balancing and more than 128 ecmp next-hops all…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00269 Published 2026-10-14 Fixed in 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO +6 CWE-787
Priority MEDIUM 46

An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root v…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0392 Published 2026-10-14 Fixed in 24.4R2-S5-EVO, 25.2R2-S2-EVO +4 CWE-78
Priority LOW 31

A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated IS-IS peer to cause a denial of service…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00269 Published 2026-10-14 Fixed in 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO +6 CWE-1284
Priority MEDIUM 44

A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00427 Published 2026-10-14 Fixed in 25.4R1-S3-EVO, 26.2R1-S2-EVO +2 CWE-134