{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Juniper Networks vulnerabilities","home_page_url":"https://patchfirst.co/vendor/juniper/","feed_url":"https://patchfirst.co/feed/vendor/juniper.json","description":"New and newly exploited Juniper Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-103406","url":"https://patchfirst.co/cve/CVE-2026-103406/","title":"CVE-2026-103406: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…","content_text":"Juniper Networks · Session Smart Conductor. Not in CISA KEV. EPSS 0.5% (higher than 43.9% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.","summary":"An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-28T17:17:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.3,"kev":null,"epss":{"score":0.00516,"percentile":0.43896},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Session Smart Conductor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-103409","url":"https://patchfirst.co/cve/CVE-2026-103409/","title":"CVE-2026-103409: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…","content_text":"Juniper Networks · Session Smart Router. Not in CISA KEV. EPSS 0.3% (higher than 28.3% of CVEs). CVSS 9.8 CRITICAL. Priority 13.2 of 100.","summary":"A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-28T17:17:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.2,"kev":null,"epss":{"score":0.00347,"percentile":0.28341},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Session Smart Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102031","url":"https://patchfirst.co/cve/CVE-2026-102031/","title":"CVE-2026-102031: An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged…","content_text":"Juniper Networks · Junos OS Evolved. Not in CISA KEV. EPSS 2.1% (higher than 81.7% of CVEs). CVSS 9.8 CRITICAL. Priority 25.4 of 100.","summary":"An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:17:00.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.4,"kev":null,"epss":{"score":0.02101,"percentile":0.8169},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS Evolved","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101956","url":"https://patchfirst.co/cve/CVE-2026-101956/","title":"CVE-2026-101956: An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.8% (higher than 54.9% of CVEs). CVSS 9.8 CRITICAL. Priority 20.0 of 100.","summary":"An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":20,"kev":null,"epss":{"score":0.0075,"percentile":0.54909},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102175","url":"https://patchfirst.co/cve/CVE-2026-102175/","title":"CVE-2026-102175: A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.7% (higher than 54.3% of CVEs). CVSS 9.8 CRITICAL. Priority 19.9 of 100.","summary":"A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:17:01.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.00733,"percentile":0.54349},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33789","url":"https://patchfirst.co/cve/CVE-2026-33789/","title":"CVE-2026-33789: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.7% (higher than 52.6% of CVEs). CVSS 9.8 CRITICAL. Priority 19.6 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.6,"kev":null,"epss":{"score":0.00687,"percentile":0.5265},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33792","url":"https://patchfirst.co/cve/CVE-2026-33792/","title":"CVE-2026-33792: A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 49.2% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.9,"kev":null,"epss":{"score":0.00611,"percentile":0.49214},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101986","url":"https://patchfirst.co/cve/CVE-2026-101986/","title":"CVE-2026-101986: An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.6% of CVEs). CVSS 9.8 CRITICAL. Priority 18.5 of 100.","summary":"An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-30T18:45:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.5,"kev":null,"epss":{"score":0.00579,"percentile":0.4761},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101982","url":"https://patchfirst.co/cve/CVE-2026-101982/","title":"CVE-2026-101982: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.1% of CVEs). CVSS 9.8 CRITICAL. Priority 18.4 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:16:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.4,"kev":null,"epss":{"score":0.00568,"percentile":0.47055},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101990","url":"https://patchfirst.co/cve/CVE-2026-101990/","title":"CVE-2026-101990: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.1% of CVEs). CVSS 9.8 CRITICAL. Priority 18.4 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-30T18:42:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.4,"kev":null,"epss":{"score":0.00568,"percentile":0.47055},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33796","url":"https://patchfirst.co/cve/CVE-2026-33796/","title":"CVE-2026-33796: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 46.5% of CVEs). CVSS 9.8 CRITICAL. Priority 18.3 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.3,"kev":null,"epss":{"score":0.00558,"percentile":0.46475},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101983","url":"https://patchfirst.co/cve/CVE-2026-101983/","title":"CVE-2026-101983: A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.0054,"percentile":0.45415},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101954","url":"https://patchfirst.co/cve/CVE-2026-101954/","title":"CVE-2026-101954: An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.8 CRITICAL. Priority 17.3 of 100.","summary":"An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:16:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.3,"kev":null,"epss":{"score":0.00477,"percentile":0.41222},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101980","url":"https://patchfirst.co/cve/CVE-2026-101980/","title":"CVE-2026-101980: An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 40.7% of CVEs). CVSS 9.8 CRITICAL. Priority 17.2 of 100.","summary":"An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:23:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.2,"kev":null,"epss":{"score":0.00471,"percentile":0.40734},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101950","url":"https://patchfirst.co/cve/CVE-2026-101950/","title":"CVE-2026-101950: A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 40.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.1 of 100.","summary":"A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-17T04:16:46.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.1,"kev":null,"epss":{"score":0.00468,"percentile":0.40552},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102178","url":"https://patchfirst.co/cve/CVE-2026-102178/","title":"CVE-2026-102178: A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.9 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T17:17:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.00455,"percentile":0.39484},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102182","url":"https://patchfirst.co/cve/CVE-2026-102182/","title":"CVE-2026-102182: A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.4% (higher than 35.4% of CVEs). CVSS 9.8 CRITICAL. Priority 16.1 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-20T21:17:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.1,"kev":null,"epss":{"score":0.00411,"percentile":0.35351},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-21902","url":"https://patchfirst.co/cve/CVE-2026-21902/","title":"CVE-2026-21902: Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root","content_text":"Juniper Networks · Junos OS Evolved. Not in CISA KEV. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 73.6 of 100.","summary":"Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root","date_published":"2026-02-25T00:00:00.000Z","date_modified":"2026-03-04T04:55:12.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.6,"kev":null,"epss":{"score":0.18476,"percentile":0.97239},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS Evolved","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2015-7755#kev","url":"https://patchfirst.co/cve/CVE-2015-7755/","title":"[KEV] CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability","content_text":"Juniper · ScreenOS. In CISA KEV since 2025-10-02. ENISA EUVD lists it as exploited. EPSS 61.1% (higher than 99.16% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1021.004 SSH. Priority 69.7 of 100.","summary":"Juniper ScreenOS Improper Authentication Vulnerability","date_published":"2025-10-02T00:00:00.000Z","date_modified":"2026-06-17T00:33:04.000Z","tags":["kev","public-exploit","T1078","T1021.004"],"_patchfirst":{"reason":"kev","priority":69.7,"kev":{"dateAdded":"2025-10-02","ransomware":false},"epss":{"score":0.61139,"percentile":0.99159},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper","product":"ScreenOS","techniqueIds":["T1078","T1021.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-21590#kev","url":"https://patchfirst.co/cve/CVE-2025-21590/","title":"[KEV] CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2025-03-13. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.6% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 60.5 of 100.","summary":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","date_published":"2025-03-13T00:00:00.000Z","date_modified":"2026-10-01T18:23:34.000Z","tags":["kev","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":60.5,"kev":{"dateAdded":"2025-03-13","ransomware":false},"epss":{"score":0.01735,"percentile":0.7764},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1068","T1059"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-21620","url":"https://patchfirst.co/cve/CVE-2024-21620/","title":"CVE-2024-21620: Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.8 HIGH. Priority 53.1 of 100.","summary":"Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS","date_published":"2024-01-25T00:00:00.000Z","date_modified":"2025-05-29T15:18:51.000Z","tags":[],"_patchfirst":{"reason":"published","priority":53.1,"kev":null,"epss":{"score":0.00908,"percentile":0.59883},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-36844#kev","url":"https://patchfirst.co/cve/CVE-2023-36844/","title":"[KEV] CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 90.0% (higher than 99.79% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 76.7 of 100.","summary":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:12.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":76.7,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.89958,"percentile":0.99792},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36847#kev","url":"https://patchfirst.co/cve/CVE-2023-36847/","title":"[KEV] CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 83.5% (higher than 99.68% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 71.6 of 100.","summary":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:13.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":71.6,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.83455,"percentile":0.99683},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-36845#kev","url":"https://patchfirst.co/cve/CVE-2023-36845/","title":"[KEV] CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 95.1% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:12.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.9507,"percentile":0.99862},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36846#kev","url":"https://patchfirst.co/cve/CVE-2023-36846/","title":"[KEV] CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 93.5% (higher than 99.84% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 66.7 of 100.","summary":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:12.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":66.7,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.93473,"percentile":0.99839},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36851#kev","url":"https://patchfirst.co/cve/CVE-2023-36851/","title":"[KEV] CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 66.2% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 55.0 of 100.","summary":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:13.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":55,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.01123,"percentile":0.66212},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-22242","url":"https://patchfirst.co/cve/CVE-2022-22242/","title":"CVE-2022-22242: Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 3.4% (higher than 88.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. Priority 62.7 of 100.","summary":"Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","date_published":"2022-10-18T00:00:00.000Z","date_modified":"2025-05-09T15:36:51.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":62.7,"kev":null,"epss":{"score":0.03431,"percentile":0.88929},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-22241","url":"https://patchfirst.co/cve/CVE-2022-22241/","title":"CVE-2022-22241: Junos OS: Vulnerability in J-Web may allow deserialization without authentication","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 1.3% (higher than 70.3% of CVEs). CVSS 8.1 HIGH. Priority 55.4 of 100.","summary":"Junos OS: Vulnerability in J-Web may allow deserialization without authentication","date_published":"2022-10-18T00:00:00.000Z","date_modified":"2025-05-09T15:37:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":55.4,"kev":null,"epss":{"score":0.01296,"percentile":0.70323},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1631#kev","url":"https://patchfirst.co/cve/CVE-2020-1631/","title":"[KEV] CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter. Priority 63.3 of 100.","summary":"Juniper Junos OS Path Traversal Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T03:02:02.000Z","tags":["kev","T1190","T1005","T1059"],"_patchfirst":{"reason":"kev","priority":63.3,"kev":{"dateAdded":"2022-03-25","ransomware":false},"epss":{"score":0.04865,"percentile":0.92032},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1005","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}