Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority MEDIUM 40

A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric…

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00352 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-121
Priority MEDIUM 49

A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or cause a denial of service via a crafted p…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00611 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-121
Priority MEDIUM 40

A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or ca…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0059 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-121
Priority MEDIUM 42

An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commit arbitrary device configuration with ro…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00482 Published 2026-10-14 Fixed in 23.4R2-S8.13, 24.2R2-S5.5 +4 CWE-91
Priority LOW 31

An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00245 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +14 CWE-191
Priority LOW 31

A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traff…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00234 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-195
Priority LOW 31

A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authenticatio…

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00271 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-617
Priority MEDIUM 48

A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentialit…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00468 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-122
Priority MEDIUM 42

A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a inj…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00529 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-121
Priority MEDIUM 42

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code wi…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00392 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-89
Priority MEDIUM 42

An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compro…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00408 Published 2026-10-14 Fixed in 23.2R2-S7.7, 23.4R2-S8.13 +5 CWE-134