Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
402,127 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-101937 | 7.1 High | Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is used | Oct 14, 2026 |
| CVE-2026-101936 | 7.1 High | Junos OS: SRX Series: An attacker causes data-plane denial of service when chassis-cluster high availability is enabled | Oct 14, 2026 |
| CVE-2026-101934 | 6.7 Medium | Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd | Oct 14, 2026 |
| CVE-2026-101927 | 8.6 High | Junos OS and Junos OS Evolved: An unprivileged local attacker causes denial of service or privilege escalation | Oct 14, 2026 |
| CVE-2026-101984 | 7.1 High | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configured | Oct 14, 2026 |
| CVE-2026-100236 | 8.6 High | Dpdk: dpdk: heap out-of-bounds read/write in gso header copy | Oct 14, 2026 |
| CVE-2026-101987 | 7.1 High | Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is used | Oct 14, 2026 |
| CVE-2026-101988 | 7.1 High | Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled | Oct 14, 2026 |
| CVE-2026-101989 | 7.1 High | Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabled | Oct 14, 2026 |
| CVE-2026-101990 | 9.3 Critical | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised | Oct 14, 2026 |
| CVE-2026-101992 | 7.1 High | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when automatic VPLS site ID is used | Oct 14, 2026 |
| CVE-2026-101993 | 7.1 High | Junos OS and Junos OS Evolved: An eBGP peer causes an rpd crash when VPLS automatic site-ID collision resolution is used | Oct 14, 2026 |
| CVE-2026-101994 | 7.1 High | Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash | Oct 14, 2026 |
| CVE-2026-101996 | 7.1 High | Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured | Oct 14, 2026 |
| CVE-2016-15060 | 6.9 Medium | PCMan FTP Server PORT buffer overflow | Oct 14, 2026 |
| CVE-2026-102064 | 8.7 High | Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used | Oct 14, 2026 |
| CVE-2026-102066 | 7.1 High | Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled | Oct 14, 2026 |
| CVE-2026-15102 | 7.5 High | Cleartext Transmission of Sensitive Information in ADP Desktop SDK | Oct 14, 2026 |
| CVE-2026-102071 | 7.1 High | Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled | Oct 14, 2026 |
| CVE-2026-101950 | 9.3 Critical | Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Secure Vector Routing is enabled | Oct 14, 2026 |
| CVE-2026-101955 | 9.2 Critical | Junos OS: SRX Series: Malformed DNS packet causes service disruption when UTM Anti-Spam SBL is used | Oct 14, 2026 |
| CVE-2026-101997 | 9.2 Critical | Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication | Oct 14, 2026 |
| CVE-2026-92153 | 7.1 High | F´: Arbitrary File Write in Svc::FileUplink via attacker-controlled StartPacket.destinationPath | Oct 14, 2026 |
| CVE-2026-102062 | 9.2 Critical | Junos OS: SRX Series: An compromised HTTPS feed server can cause remote code execution when Security Intelligence is used | Oct 14, 2026 |
| CVE-2026-102078 | 8.2 High | Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash | Oct 14, 2026 |
| CVE-2026-102079 | 8.5 High | Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection | Oct 14, 2026 |
| CVE-2026-102080 | 6.0 Medium | Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover | Oct 14, 2026 |
| CVE-2026-102081 | 8.7 High | Junos OS: SRX4000 Series, SRX5000 Series and MX Series with SPC3: With application services configured, high session churn causes memory leak which will ultimately impact traffic | Oct 14, 2026 |
| CVE-2026-92151 | 7.5 High | F´: SpacePacketDeframer Small Packet Assertion DoS | Oct 14, 2026 |
| CVE-2026-102082 | 8.2 High | Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs | Oct 14, 2026 |
| CVE-2026-93637 | 3.7 Low | Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting | Oct 14, 2026 |
| CVE-2026-102083 | 8.2 High | Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash | Oct 14, 2026 |
| CVE-2026-102084 | 9.2 Critical | Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution | Oct 14, 2026 |
| CVE-2026-93635 | 5.3 Medium | Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution | Oct 14, 2026 |
| CVE-2026-102085 | 6.9 Medium | Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker | Oct 14, 2026 |
| CVE-2026-102086 | 8.2 High | Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash | Oct 14, 2026 |
| CVE-2026-102087 | 7.1 High | Junos OS and Junos OS Evolved: If in a traffic engineering scenario a specific valid BGP-LS attribute is received rpd crashes | Oct 14, 2026 |
| CVE-2026-103993 | 6.9 Medium | Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and graceful-shutdown sender is added while attempting to advertise rpd crashes | Oct 14, 2026 |
| CVE-2026-59951 | 6.9 Medium | MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion | Oct 14, 2026 |
| CVE-2026-101991 | 5.3 Medium | Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled | Oct 14, 2026 |
| CVE-2026-101986 | 9.3 Critical | Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution | Oct 14, 2026 |
| CVE-2026-101951 | 8.7 High | Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash if a malformed MCAST-TREE NLRI is received and readvertised | Oct 14, 2026 |
| CVE-2026-101957 | 8.7 High | Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used | Oct 14, 2026 |
| CVE-2026-102065 | 8.7 High | Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled | Oct 14, 2026 |
| CVE-2026-101974 | 7.1 High | Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used | Oct 14, 2026 |
| CVE-2026-102067 | 7.1 High | Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used | Oct 14, 2026 |
| CVE-2026-101995 | 5.3 Medium | Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption | Oct 14, 2026 |
| CVE-2026-101948 | 8.7 High | Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used | Oct 14, 2026 |
| CVE-2026-101977 | 8.7 High | Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used | Oct 14, 2026 |
| CVE-2026-103946 | 8.7 High | SQL Injection | Oct 14, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.