Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,127 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-102041 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled | Oct 14, 2026 |
| CVE-2026-102040 | 7.1 High | Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used | Oct 14, 2026 |
| CVE-2026-102039 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes routing-process denial of service when GMPLS EVPL dynamic transport is used | Oct 14, 2026 |
| CVE-2026-102037 | 9.2 Critical | Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used | Oct 14, 2026 |
| CVE-2026-102036 | 8.7 High | Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service | Oct 14, 2026 |
| CVE-2026-102035 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled | Oct 14, 2026 |
| CVE-2026-102034 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled | Oct 14, 2026 |
| CVE-2026-102033 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled | Oct 14, 2026 |
| CVE-2026-102032 | 7.1 High | Junos OS and Junos OS Evolved: Unintended l2ald memory allocation causes a denial of service when static MAC IP configurations are present | Oct 14, 2026 |
| CVE-2026-102031 | 9.3 Critical | Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled | Oct 14, 2026 |
| CVE-2026-102030 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when BGP MVPN inter-region tunneling is used | Oct 14, 2026 |
| CVE-2026-102029 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion | Oct 14, 2026 |
| CVE-2026-102028 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used | Oct 14, 2026 |
| CVE-2026-102027 | 8.7 High | Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed | Oct 14, 2026 |
| CVE-2026-102026 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used | Oct 14, 2026 |
| CVE-2026-102025 | 8.7 High | Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used | Oct 14, 2026 |
| CVE-2026-102024 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used | Oct 14, 2026 |
| CVE-2026-102023 | 8.7 High | Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used | Oct 14, 2026 |
| CVE-2026-102022 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled | Oct 14, 2026 |
| CVE-2026-102021 | 7.1 High | Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled | Oct 14, 2026 |
| CVE-2026-102020 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled | Oct 14, 2026 |
| CVE-2026-102019 | 7.1 High | Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled | Oct 14, 2026 |
| CVE-2026-102018 | 7.1 High | Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled | Oct 14, 2026 |
| CVE-2026-75085 | 4.2 Medium | Out-of-bounds read from received-frame length underflow in the STM32WBA IEEE 802.15.4 driver | Oct 14, 2026 |
| CVE-2026-75084 | 6.8 Medium | Out-of-bounds write in the TI CC1200 IEEE 802.15.4 driver from an unvalidated radio-supplied packet length | Oct 14, 2026 |
| CVE-2026-19673 | 7.1 High | Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header | Oct 14, 2026 |
| CVE-2026-75083 | 5.9 Medium | Integer underflow of the radio-reported frame length causes an out-of-bounds write in the NXP KW41Z IEEE 802.15.4 driver | Oct 14, 2026 |
| CVE-2026-102017 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled | Oct 14, 2026 |
| CVE-2026-109439 | 9.3 Critical | Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718 | Oct 14, 2026 |
| CVE-2026-102016 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled | Oct 14, 2026 |
| CVE-2026-102015 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used | Oct 14, 2026 |
| CVE-2026-102014 | 8.7 High | Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used | Oct 14, 2026 |
| CVE-2026-102013 | 6.7 Medium | Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used | Oct 14, 2026 |
| CVE-2026-102012 | 8.7 High | Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled | Oct 14, 2026 |
| CVE-2026-102011 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled | Oct 14, 2026 |
| CVE-2026-102000 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled | Oct 14, 2026 |
| CVE-2026-101999 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled | Oct 14, 2026 |
| CVE-2026-101971 | 7.1 High | Junos OS and Junos OS Evolved: An attacker causes routing protocol daemon crash when OSPFv3 is enabled | Oct 14, 2026 |
| CVE-2026-101970 | 7.1 High | Junos OS and Junos OS Evolved: Specific PIM messages causes rpd crash when multiple-triggered-joins is used | Oct 14, 2026 |
| CVE-2026-101969 | 7.1 High | Junos OS and Junos OS Evolved: An unauthenticated attacker causes rpd denial of service when IPv6 PIM is enabled | Oct 14, 2026 |
| CVE-2026-101968 | 5.3 Medium | Junos OS and Junos OS Evolved: EX Series, MX Series, ACX Series: An attacker causes rpd heap memory disclosure when Rosen-MVPN data-MDT is enabled | Oct 14, 2026 |
| CVE-2026-101946 | 5.3 Medium | Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used | Oct 14, 2026 |
| CVE-2026-101945 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes routing daemon denial of service when EVPN BGP is enabled | Oct 14, 2026 |
| CVE-2026-101944 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes a routing protocol daemon denial of service when EVPN is used | Oct 14, 2026 |
| CVE-2026-101943 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured | Oct 14, 2026 |
| CVE-2026-101942 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes rpd denial of service when EVPN route signaling is used | Oct 14, 2026 |
| CVE-2026-101941 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled | Oct 14, 2026 |
| CVE-2026-101940 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled | Oct 14, 2026 |
| CVE-2026-101939 | 8.7 High | Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used | Oct 14, 2026 |
| CVE-2026-101938 | 7.1 High | Junos OS and Junos OS Evolved: SRX Series: An attacker causes a forwarding-plane outage when SVR vector routing is used | Oct 14, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.