Vendor
Juniper Networks
8 of 29 Juniper Networks CVEs in Patchfirst (28%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 29
- In CISA KEV
- 828%
- Known ransomware use
- 0
- Median days to KEV
- 88
- from publication
- Latest KEV listing
- 2 Oct 2025
Products
In KEVOther CVEs
- Junos OS In KEV: 7 CVEs: 24
- ScreenOS In KEV: 1 CVEs: 1
- Junos OS Evolved In KEV: 0 CVEs: 2
- Session Smart Conductor In KEV: 0 CVEs: 1
- Session Smart Router In KEV: 0 CVEs: 1
Top ATT&CK techniques
What attackers do with Juniper Networks CVEs- T1190Exploit Public-Facing Application CVEs: 6
- T1059Command and Scripting Interpreter CVEs: 6
- T1078Valid Accounts CVEs: 1
- T1021.004SSH CVEs: 1
- T1005Data from Local System CVEs: 1
Counts are Juniper Networks CVEs linked to the technique. Each link’s provenance is on the CVE page.
Juniper Networks CVEs
29 CVEs, by priority- CVE-2023-36844Juniper Junos OS EX Series PHP External Variable Modification Vulnerability90.0%Top 0.21%76.7priority
- CVE-2026-21902Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as rootJuniper Networks · Junos OS EvolvedPublic exploitCritical · 9.818.5%Top 2.8%73.6priority
- CVE-2023-36847Juniper Junos OS EX Series Missing Authentication for Critical Function VulnerabilityJuniper · Junos OSKEVMedium · 5.3T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter83.5%Top 0.32%71.6priority
- CVE-2023-36845Juniper Junos OS EX Series and SRX Series PHP External Variable Modification VulnerabilityJuniper · Junos OSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter95.1%Top 0.14%69.8priority
- CVE-2015-7755Juniper ScreenOS Improper Authentication Vulnerability61.1%Top 0.84%69.7priority
- CVE-2023-36846Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityJuniper · Junos OSKEVPublic exploitMedium · 5.3T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter93.5%Top 0.16%66.7priority
- CVE-2020-1631Juniper Junos OS Path Traversal VulnerabilityJuniper · Junos OSKEVCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more4.9%Top 8%63.3priority
- CVE-2022-22242Junos OS: Cross-site Scripting (XSS) vulnerability in J-WebJuniper Networks · Junos OSPublic exploitMedium · 6.13.4%Top 11%62.7priority
- CVE-2025-21590Juniper Junos OS Improper Isolation or Compartmentalization VulnerabilityJuniper · Junos OSKEVMedium · 4.4T1059Command and Scripting InterpreterT1068Exploitation for Privilege Escalation1 report1.7%Top 22%60.5priority
- CVE-2022-22241Junos OS: Vulnerability in J-Web may allow deserialization without authenticationJuniper Networks · Junos OSHigh · 8.11.3%Top 30%55.4priority
- CVE-2023-36851Juniper Junos OS SRX Series Missing Authentication for Critical Function VulnerabilityJuniper · Junos OSKEVMedium · 5.3T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1.1%Top 34%55.0priority
- CVE-2024-21620Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSSJuniper Networks · Junos OSHigh · 8.80.9%Top 40%53.1priority
- CVE-2026-102031An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged…Juniper Networks · Junos OS EvolvedCritical · 9.82.1%Top 18%25.4priority
- CVE-2026-101956An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an…Juniper Networks · Junos OSCritical · 9.80.8%Top 45%20.0priority
- CVE-2026-102175A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and…Juniper Networks · Junos OSCritical · 9.80.7%Top 46%19.9priority
- CVE-2026-33789A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…Juniper Networks · Junos OSCritical · 9.80.7%Top 47%19.6priority
- CVE-2026-33792A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…Juniper Networks · Junos OSCritical · 9.80.6%Top 51%18.9priority
- CVE-2026-101986An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an…Juniper Networks · Junos OSCritical · 9.80.6%Top 52%18.5priority
- CVE-2026-101982A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…Juniper Networks · Junos OSCritical · 9.80.6%Top 53%18.4priority
- CVE-2026-101990A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…Juniper Networks · Junos OSCritical · 9.80.6%Top 53%18.4priority
- CVE-2026-33796A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…Juniper Networks · Junos OSCritical · 9.80.6%Top 54%18.3priority
- CVE-2026-101983A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved…Juniper Networks · Junos OSCritical · 9.80.5%Top 55%18.1priority
- CVE-2026-101954An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper…Juniper Networks · Junos OSCritical · 9.80.5%Top 59%17.3priority
- CVE-2026-101980An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an…Juniper Networks · Junos OSCritical · 9.80.5%Top 59%17.2priority
- CVE-2026-101950A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an…Juniper Networks · Junos OSCritical · 9.80.5%Top 59%17.1priority
- CVE-2026-102178A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…Juniper Networks · Junos OSCritical · 9.80.5%Top 61%16.9priority
- CVE-2026-103406An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…Juniper Networks · Session Smart ConductorCritical · 9.80.5%Top 56%16.3priority
- CVE-2026-102182A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…Juniper Networks · Junos OSCritical · 9.80.4%Top 65%16.1priority
- CVE-2026-103409A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…Juniper Networks · Session Smart RouterCritical · 9.80.3%Top 72%13.2priority