Skip to content
OpenAdvisories

Vendor

Juniper Networks

1,090 known vulnerabilities.

Products

Junos OS 824 Junos OS Evolved 376 Junos Space 49 NorthStar Controller Application 19 Session Smart Router 18 Juniper ATP 12 Session Smart Conductor 12 ScreenOS 7 Paragon Active Assurance 5 Contrail Service Orchestration 5 Junos Space Security Director 3 MIST Cloud UI 3 SRC Series 3 Contrail 2 SBR Carrier 2 JSI LWC 2 128 Technology Session Smart Router 1 Juniper Security Director 1 Contrail Networking 1 Contrail Cloud 1 Contrail Insights 1 CTPView 1 WAN Assurance Managed Router 1 Junos 1 WAN Assurance Router 1 JATP 1 Paragon Automation (Pathfinder, Planner, Insights) 1 Paragon Active Assurance (Formerly Netrounds) 1 Service Insight 1 Junos OS with BGP enabled 1 Service Now 1 Apstra 1 juniper/libslax 1 Junos Snapshot Administrator (JSNAPy) 1 Junos OS on SRX Series Services Gateways chassis cluster 1 AppID Service Sigpack 1 JDPI-Decoder Engine 1 Junos OS where the BGP add-path feature is enabled with 'send' option or with both 'send' and 'receive' options 1 Junos OS with DHCPv6 enabled 1 Security Director Policy Enforcer 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-103394

    Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.

    An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment.

    Juniper Networks Session Smart Router Network devices
  • Low 3.5
    CVE-2026-101946

    Junos OS and Junos OS Evolved: An attacker causes rpd process memory disclosure when IPv6 LDP is used

    An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process memory and disrupt an LDP adjacency via an IPv6 LDP message.

    Juniper Networks Junos OS Junos OS Evolved Network devices
  • Low 3.1
    CVE-2026-101991

    Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled

    An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a sessio…

    Juniper Networks Junos OS Junos OS Evolved Network devices