Skip to content
OpenAdvisories
High WID-SEC-2026-2257 23 CVEs

Juniper JUNOS und JUNOS Evolved: Mehrere Schwachstellen

Published Jul 8, 2026 · Updated Jul 9, 2026 · Revision 2 · de-DE

Vendor: Juniper Networks Product: EX Series Product: Junos Product: MX Series Product: QFX Series Product: SRX Series

Summary

Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, JUNOS Evolved, Juniper EX Series, Juniper MX Series, Juniper QFX Series und Juniper SRX Series ausnutzen, um einen Denial of Service Zustand herbeizuführen, um Informationen offenzulegen, um Code auszuführen und um ein undefiniertes Verhalten auszulösen.

Product

JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird.
Bei den Switches der Juniper EX-Serie handelt es sich um Access- und Aggregations-/Core-Layer-Switches.
Die Juniper MX-Serie ist eine Produktfamilie von Routern.
Die Switches der QFX-Serie von Juniper sichern und automatisieren Netzwerke in Rechenzentren.
SRX Series Services Gateways ist ein Next-Generation Anti-Threat Firewall von Juniper.

Vulnerabilities 23

  • High 7.5
    CVE-2026-57023

    Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash

    An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial of Service (DoS). When…

    Juniper Networks Junos OS Network devices
  • High 7.5
    CVE-2026-57026

    Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash

    An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS).If the SIP ALG is …

    Juniper Networks Junos OS Network devices
  • High 7.3
    CVE-2026-57028

    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Due to an incorrect initialization, a process which should…

    Juniper Networks Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2026-33800

    Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash

    An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).Micro-BFD session flaps generate respective up/…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2026-33801

    Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker sending a specific BGP update over an established BGP ses…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2026-33803

    Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker

    An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to…

    Juniper Networks Junos OS Evolved Network devices
  • Medium 6.5
    CVE-2026-57019

    Junos OS: MX Series: Specific traffic causes an FPC to reset

    An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When a specific packet is rece…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2026-57020

    Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). On all QFX10000 platfo…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2026-57027

    Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash

    A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series devices allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS).When sFlow is co…

    Juniper Networks Junos OS Network devices
  • Medium 6.5
    CVE-2026-57032

    Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash

    An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker with low privileges to cause a Denial-of-Service (DoS). If an attempt is made t…

    Juniper Networks Junos OS Network devices
  • Medium 5.9
    CVE-2026-33794

    Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated network-based attacker generating continuous routing updates, r…

    Juniper Networks Junos OS Evolved Network devices
  • Medium 5.9
    CVE-2026-57022

    Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). When …

    Juniper Networks Junos OS Network devices
  • Medium 5.9
    CVE-2026-57030

    Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS

    A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of…

    Juniper Networks Junos OS Network devices
  • Medium 5.8
    CVE-2026-57054

    Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs

    A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreac…

    Juniper Networks Junos OS Network devices
  • Medium 5.5
    CVE-2026-33802

    Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command

    A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS). On EX2300, EX4000, EX4100, EX4300-MP (Multigigabit) and EX4400 switches, an authenticated, lo…

    Juniper Networks Junos OS Network devices
  • Medium 5.5
    CVE-2026-57025

    Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash

    A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS). On EX Series, QFX Series and MX Series a low-p…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 5.3
    CVE-2026-57021

    Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash

    An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). If an SRX Series device is configured for remote-access VPN …

    Juniper Networks Junos OS Network devices
  • Medium 5.3
    CVE-2026-57024

    Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously

    A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). On an MX with SPC3 a…

    Juniper Networks Junos OS Network devices
  • Medium 5.3
    CVE-2026-57029

    Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash

    A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Denial-of-Service (DoS). When the reachability of an sFlow collector changes, the …

    Juniper Networks Junos OS Evolved Network devices
  • Medium 4.7
    CVE-2026-57031

    Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect

    An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to bypass configured firewall filters. On MX Series devices with MPC10/11, LC4800…

    Juniper Networks Junos OS Network devices
  • Medium 4.4
    CVE-2026-21901

    Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash

    A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration parameter to create a Denial of Service (Do…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Medium 4.3
    CVE-2026-33799

    Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash

    An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker sending specific valid SNMPv3 queries to trigger a memory leak. Over time, continuous receipt of t…

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Unscored —
    CVE-2020-7450

    In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-…

    xbps Alpine

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-42719, EUVD-2026-42718, EUVD-2026-42716, EUVD-2026-42715, EUVD-2026-42714, EUVD-2026-42713, EUVD-2026-42711, EUVD-2026-42709, EUVD-2026-42708, EUVD-2026-42707, EUVD-2026-42706, EUVD-2026-42704, EUVD-2026-42703, EUVD-2026-42702, EUVD-2026-42700, EUVD-2026-42699, EUVD-2026-42697, EUVD-2026-42712, EUVD-2026-42721, EUVD-2026-42701, EUVD-2026-42724, EUVD-2026-42723

  2. #1

    Initiale Fassung

References