Junos OS
683 CVEs tracked. 7 of them are in CISA KEV.
This hub aggregates every CVE we track for Junos OS, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
Junos OS CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 17 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 6 |
| 2025-02 | 1 |
| 2025-03 | 1 |
| 2025-04 | 21 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 21 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 8 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 20 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 19 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 18 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 683 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical24
- High312
- Medium347
Latest CVEs
The 15 most recently published vulnerabilities affecting Junos OS.
- CVE-2026-57054Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs5.8
- CVE-2026-57032Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash6.5
- CVE-2026-57031Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect4.7
- CVE-2026-57030Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS5.9
- CVE-2026-57027Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash6.5
- CVE-2026-57026Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash7.5
- CVE-2026-57025Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash5.5
- CVE-2026-57024Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously5.3
- CVE-2026-57023Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash7.5
- CVE-2026-57022Junos OS: MX Series with SPC3, SRX Series: Specific packet in response to a TCP connection establishment by the affected device can crash the PFE5.9
- CVE-2026-57021Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash5.3
- CVE-2026-57020Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood6.5
- CVE-2026-57019Junos OS: MX Series: Specific traffic causes an FPC to reset6.5
- CVE-2026-33802Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command5.5
- CVE-2026-33801Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes6.5
Product grouping is registry-driven, with AI assist and human review. How it works