THE LATEST / SECURITY & VULNERABILITIES
Threat News
Recent vulnerabilities and security advisories, straight from the source.
Every cached source, newest first. All entries link to the original publisher.
For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.
16,942 stories · Past 30 days · Newest first
Subscribe to this view · RSSSource updates
- NVDUp to date · Checked
- CISA · Known ExploitedUp to date · Checked
- CISA · IndustrialUp to date · Checked
- CERT-EUUp to date · Checked
Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.
- NVD
CVE-2026-102031 — An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authent…
Critical · CVSS 4.0 9.3 · Assessor: [email protected]
An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.
CVE-2026-102031Read original ↗ (opens in a new tab) - NVD
CVE-2026-102030 — An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured…
High · CVSS 4.0 8.7 · Assessor: [email protected]
An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter‑region segmented VRF with 'protocols mvpn inter-region-template' is configured.
CVE-2026-102030Read original ↗ (opens in a new tab) - NVD
CVE-2026-102029 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evol…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion.
CVE-2026-102029Read original ↗ (opens in a new tab) - NVD
CVE-2026-102028 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evol…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured.
CVE-2026-102028Read original ↗ (opens in a new tab) - NVD
CVE-2026-102027 — An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…
High · CVSS 4.0 8.7 · Assessor: [email protected]
An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to cause an rpd crash via BGP labeled-unicast UPDATEs when the affected multipath features are enabled.
CVE-2026-102027Read original ↗ (opens in a new tab) - NVD
CVE-2026-102026 — An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Network…
High · CVSS 4.0 8.7 · Assessor: [email protected]
An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled.
CVE-2026-102026Read original ↗ (opens in a new tab) - NVD
CVE-2026-102025 — A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via a BGP route update when extended next-hop tunneling and SRv6 service processing are used.
CVE-2026-102025Read original ↗ (opens in a new tab) - NVD
CVE-2026-102024 — An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolve…
High · CVSS 4.0 8.7 · Assessor: [email protected]
An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled.
CVE-2026-102024Read original ↗ (opens in a new tab) - NVD
CVE-2026-102023 — A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacke…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured.
CVE-2026-102023Read original ↗ (opens in a new tab) - NVD
CVE-2026-102022 — A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved a…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements.
CVE-2026-102022Read original ↗ (opens in a new tab) - NVD
CVE-2026-102021 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evol…
High · CVSS 4.0 7.1 · Assessor: [email protected]
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent network attacker to cause a denial of service via a crafted RSVP packet when MPLS-TE RSVP processing is enabled. The condition can terminate rpd and disrupt routing protocol sessions.
CVE-2026-102021Read original ↗ (opens in a new tab) - NVD
CVE-2026-102020 — A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authentic…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates.
CVE-2026-102020Read original ↗ (opens in a new tab) - NVD
CVE-2026-102019 — An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Juno…
High · CVSS 4.0 7.1 · Assessor: [email protected]
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed RIPv2 message.
CVE-2026-102019Read original ↗ (opens in a new tab) - NVD
CVE-2026-102018 — A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unau…
High · CVSS 4.0 7.1 · Assessor: [email protected]
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message.
CVE-2026-102018Read original ↗ (opens in a new tab) - NVD
CVE-2026-102017 — An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthen…
High · CVSS 4.0 7.1 · Assessor: [email protected]
An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled.
CVE-2026-102017Read original ↗ (opens in a new tab) - NVD
CVE-2026-102016 — An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Juno…
High · CVSS 4.0 8.7 · Assessor: [email protected]
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update.
CVE-2026-102016Read original ↗ (opens in a new tab) - NVD
CVE-2026-102015 — A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface.
CVE-2026-102015Read original ↗ (opens in a new tab) - NVD
CVE-2026-102014 — A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to inf…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response.
CVE-2026-102014Read original ↗ (opens in a new tab) - NVD
CVE-2026-102013 — A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an…
Medium · CVSS 4.0 6.7 · Assessor: [email protected]
A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message.
CVE-2026-102013Read original ↗ (opens in a new tab) - NVD
CVE-2026-102012 — A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthentic…
High · CVSS 4.0 8.7 · Assessor: [email protected]
A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.
CVE-2026-102012Read original ↗ (opens in a new tab) - NVD
CVE-2026-102011 — A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacke…
High · CVSS 4.0 7.1 · Assessor: [email protected]
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors (or one neighbor duplicated by an L2 loop) advertise the same transport address on a link-protected interface.
CVE-2026-102011Read original ↗ (opens in a new tab) - NVD
CVE-2026-102000 — A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthe…
High · CVSS 4.0 7.1 · Assessor: [email protected]
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic.
CVE-2026-102000Read original ↗ (opens in a new tab) - NVD
CVE-2026-101999 — A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacke…
High · CVSS 4.0 7.1 · Assessor: [email protected]
A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message.
CVE-2026-101999Read original ↗ (opens in a new tab) - NVD
CVE-2026-101997 — An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Net…
Critical · CVSS 4.0 9.2 · Assessor: [email protected]
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.
CVE-2026-101997Read original ↗ (opens in a new tab) - NVD
CVE-2026-101996 — A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured…
High · CVSS 4.0 7.1 · Assessor: [email protected]
A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP allows an adjacent attacker to cause a denial of service via an inconsistent ICCP peer message.
CVE-2026-101996Read original ↗ (opens in a new tab)
Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.