Patchfirst: Juniper Networks vulnerabilities

Patchfirst: Juniper Networks vulnerabilitieshttps://patchfirst.co/vendor/juniper/New and newly exploited Juniper Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2026-103406: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…https://patchfirst.co/cve/CVE-2026-103406/CVE-2026-103406Wed, 28 Oct 2026 00:00:00 GMTJuniper Networks · Session Smart Conductor. Not in CISA KEV. EPSS 0.5% (higher than 43.9% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.CVE-2026-103409: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…https://patchfirst.co/cve/CVE-2026-103409/CVE-2026-103409Wed, 28 Oct 2026 00:00:00 GMTJuniper Networks · Session Smart Router. Not in CISA KEV. EPSS 0.3% (higher than 28.3% of CVEs). CVSS 9.8 CRITICAL. Priority 13.2 of 100.CVE-2026-102031: An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged…https://patchfirst.co/cve/CVE-2026-102031/CVE-2026-102031Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS Evolved. Not in CISA KEV. EPSS 2.1% (higher than 81.7% of CVEs). CVSS 9.8 CRITICAL. Priority 25.4 of 100.CVE-2026-101956: An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an…https://patchfirst.co/cve/CVE-2026-101956/CVE-2026-101956Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.8% (higher than 54.9% of CVEs). CVSS 9.8 CRITICAL. Priority 20.0 of 100.CVE-2026-102175: A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and…https://patchfirst.co/cve/CVE-2026-102175/CVE-2026-102175Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.7% (higher than 54.3% of CVEs). CVSS 9.8 CRITICAL. Priority 19.9 of 100.CVE-2026-33789: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…https://patchfirst.co/cve/CVE-2026-33789/CVE-2026-33789Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.7% (higher than 52.6% of CVEs). CVSS 9.8 CRITICAL. Priority 19.6 of 100.CVE-2026-33792: A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…https://patchfirst.co/cve/CVE-2026-33792/CVE-2026-33792Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 49.2% of CVEs). CVSS 9.8 CRITICAL. Priority 18.9 of 100.CVE-2026-101986: An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an…https://patchfirst.co/cve/CVE-2026-101986/CVE-2026-101986Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.6% of CVEs). CVSS 9.8 CRITICAL. Priority 18.5 of 100.CVE-2026-101982: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…https://patchfirst.co/cve/CVE-2026-101982/CVE-2026-101982Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.1% of CVEs). CVSS 9.8 CRITICAL. Priority 18.4 of 100.CVE-2026-101990: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…https://patchfirst.co/cve/CVE-2026-101990/CVE-2026-101990Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.1% of CVEs). CVSS 9.8 CRITICAL. Priority 18.4 of 100.CVE-2026-33796: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…https://patchfirst.co/cve/CVE-2026-33796/CVE-2026-33796Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 46.5% of CVEs). CVSS 9.8 CRITICAL. Priority 18.3 of 100.CVE-2026-101983: A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved…https://patchfirst.co/cve/CVE-2026-101983/CVE-2026-101983Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.CVE-2026-101954: An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper…https://patchfirst.co/cve/CVE-2026-101954/CVE-2026-101954Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.8 CRITICAL. Priority 17.3 of 100.CVE-2026-101980: An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an…https://patchfirst.co/cve/CVE-2026-101980/CVE-2026-101980Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 40.7% of CVEs). CVSS 9.8 CRITICAL. Priority 17.2 of 100.CVE-2026-101950: A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an…https://patchfirst.co/cve/CVE-2026-101950/CVE-2026-101950Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 40.6% of CVEs). CVSS 9.8 CRITICAL. Priority 17.1 of 100.CVE-2026-102178: A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…https://patchfirst.co/cve/CVE-2026-102178/CVE-2026-102178Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.9 of 100.CVE-2026-102182: A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…https://patchfirst.co/cve/CVE-2026-102182/CVE-2026-102182Wed, 14 Oct 2026 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.4% (higher than 35.4% of CVEs). CVSS 9.8 CRITICAL. Priority 16.1 of 100.CVE-2026-21902: Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as roothttps://patchfirst.co/cve/CVE-2026-21902/CVE-2026-21902Wed, 25 Feb 2026 00:00:00 GMTJuniper Networks · Junos OS Evolved. Not in CISA KEV. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 73.6 of 100.public-exploit[KEV] CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerabilityhttps://patchfirst.co/cve/CVE-2015-7755/CVE-2015-7755#kevThu, 02 Oct 2025 00:00:00 GMTJuniper · ScreenOS. In CISA KEV since 2025-10-02. ENISA EUVD lists it as exploited. EPSS 61.1% (higher than 99.16% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1021.004 SSH. Priority 69.7 of 100.kevpublic-exploitT1078T1021.004[KEV] CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerabilityhttps://patchfirst.co/cve/CVE-2025-21590/CVE-2025-21590#kevThu, 13 Mar 2025 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2025-03-13. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.6% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 60.5 of 100.kevT1068T1059CVE-2024-21620: Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSShttps://patchfirst.co/cve/CVE-2024-21620/CVE-2024-21620Thu, 25 Jan 2024 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.8 HIGH. Priority 53.1 of 100.[KEV] CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-36844/CVE-2023-36844#kevMon, 13 Nov 2023 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 90.0% (higher than 99.79% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 76.7 of 100.kevpublic-exploitT1190[KEV] CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-36847/CVE-2023-36847#kevMon, 13 Nov 2023 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 83.5% (higher than 99.68% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 71.6 of 100.kevT1190T1059[KEV] CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-36845/CVE-2023-36845#kevMon, 13 Nov 2023 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 95.1% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-36846/CVE-2023-36846#kevMon, 13 Nov 2023 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 93.5% (higher than 99.84% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 66.7 of 100.kevpublic-exploitT1190T1059[KEV] CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerabilityhttps://patchfirst.co/cve/CVE-2023-36851/CVE-2023-36851#kevMon, 13 Nov 2023 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 66.2% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 55.0 of 100.kevT1190T1059CVE-2022-22242: Junos OS: Cross-site Scripting (XSS) vulnerability in J-Webhttps://patchfirst.co/cve/CVE-2022-22242/CVE-2022-22242Tue, 18 Oct 2022 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 3.4% (higher than 88.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. Priority 62.7 of 100.public-exploitCVE-2022-22241: Junos OS: Vulnerability in J-Web may allow deserialization without authenticationhttps://patchfirst.co/cve/CVE-2022-22241/CVE-2022-22241Tue, 18 Oct 2022 00:00:00 GMTJuniper Networks · Junos OS. Not in CISA KEV. EPSS 1.3% (higher than 70.3% of CVEs). CVSS 8.1 HIGH. Priority 55.4 of 100.[KEV] CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2020-1631/CVE-2020-1631#kevFri, 25 Mar 2022 00:00:00 GMTJuniper · Junos OS. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter. Priority 63.3 of 100.kevT1190T1005T1059