Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,127 vulnerabilities match.

CVESeveritySummary
CVE-2026-1019798.7 HighJunos OS and Junos OS Evolved: A network attacker causes root-level code execution or denial of service when SNMP and AAA are enabled
CVE-2026-1019768.7 HighJunos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an rpd crash
CVE-2026-1019757.1 HighJunos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when prefix-SID best-route installation is used
CVE-2026-1019727.1 HighJunos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF is enabled
CVE-2026-921587.2 HighF´: FpySequencer Integer Overflow in Stack Offset/Size Validation Leading to Out-of-Bounds Write
CVE-2026-1020778.7 HighJunos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops
CVE-2026-921596.5 MediumF´: TlmPacketizer copies oversized telemetry past configured channel slots and emits corrupted packetized telemetry
CVE-2026-921566.5 MediumF´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge
CVE-2026-921576.5 MediumF´: FileDownlink SendPartial integer overflow lets legal startOffset/length values reach a reachable assertion
CVE-2026-921529.3 CriticalF´: Unvalidated Port Index in GenericHub
CVE-2026-337988.7 HighJunos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled
CVE-2026-337969.3 CriticalJunos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
CVE-2026-337958.7 HighJunos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
CVE-2026-337929.3 CriticalJunos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured
CVE-2026-337899.2 CriticalJunos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
CVE-2026-1021858.7 HighJunos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used
CVE-2026-1021848.7 HighJunos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash
CVE-2026-1021838.7 HighJunos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes
CVE-2026-1021829.3 CriticalJunos OS: MX Series: Certificate-based IKE packets cause root-level code execution
CVE-2026-1021808.7 HighJunos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
CVE-2026-1021798.7 HighJunos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used
CVE-2026-1021789.3 CriticalJunos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise
CVE-2026-1021777.2 HighJunos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used
CVE-2026-1021768.7 HighJunos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled
CVE-2026-1021759.3 CriticalJunos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used
CVE-2026-965965.9 Mediumerl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole
CVE-2026-1021748.7 HighJunos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of service or root-level code execution when JIMS identity publishing is enabled
CVE-2026-1020618.7 HighJunos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
CVE-2026-1052366.3 MediumTLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries
CVE-2026-1020607.1 HighJunos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used
CVE-2026-1020598.7 HighJunos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server causes root-level command execution when the phone-home client processes specific information
CVE-2026-942008.2 HighTLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl
CVE-2026-1020587.1 HighJunos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
CVE-2026-1020578.7 HighJunos OS: An attacker causes DHCP service disruption during DHCP client operation
CVE-2026-1020567.1 HighJunos OS and Junos OS Evolved: An attacker causes denial of service and information disclosure when Ethernet CFM is enabled
CVE-2026-1056598.7 HighHTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream processes indefinitely in Bandit
CVE-2026-1020558.7 HighJunos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execution and denial of service when enhanced CFM is enabled
CVE-2026-1020545.3 MediumJunos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
CVE-2026-1020536.9 MediumJunos OS and Junos OS Evolved: An EVPN-VXLAN memory leak causes denial of service when active-active multihoming is used
CVE-2026-1020528.7 HighJunos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
CVE-2026-1020517.1 HighJunos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
CVE-2026-1020508.7 HighJunos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
CVE-2026-1020498.7 HighJunos OS and Junos OS Evolved: An attacker causes l2cpd crash or root code execution when Unified Access Policy is enabled
CVE-2026-1020487.1 HighJunos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
CVE-2026-1020477.1 HighJunos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
CVE-2026-1020468.7 HighJunos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
CVE-2026-1020457.1 HighJunos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
CVE-2026-1020448.7 HighJunos OS and Junos OS Evolved: An attacker causes a routing control-plane denial of service when BGP-LS traffic engineering is enabled
CVE-2026-1020437.1 HighJunos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
CVE-2026-1020427.1 HighJunos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.