PATCHBAY / PUBLICThreat News
Appearance
Color mode

Stronger text, borders, and focus indicators. Works with either color mode.

Online

THE LATEST / SECURITY & VULNERABILITIES

Threat News

Recent vulnerabilities and security advisories, straight from the source.

Every cached source, newest first. All entries link to the original publisher.

For severity filtering, choose All CVEs above. Scores are available for NVD entries when supplied by an assessor. A severity filter excludes unscored entries; choose “Unscored / not supplied” to see them. Severity describes technical impact, not exploitation or risk.

16,942 stories · Past 30 days · Newest first

Subscribe to this view · RSS
Source updates

Sources refresh hourly; NVD every two hours. Available stories remain readable while a source recovers.

  1. NVD

    CVE-2026-101957 — An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evol…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause an rpd crash via an LLGR-stale route update readvertised to a configured non-LLGR peer group.

    CVE-2026-101957
    Read original (opens in a new tab)
  2. NVD

    CVE-2026-101956 — An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauth…

    Critical · CVSS 4.0 9.3 · Assessor: [email protected]

    An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the exposed J-Web web interface.

    CVE-2026-101956
    Read original (opens in a new tab)
  3. NVD

    CVE-2026-101955 — A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an un…

    Critical · CVSS 4.0 9.2 · Assessor: [email protected]

    A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via a injected malformed DNS packet when Anti-Spam SBL inspection is enabled.

    CVE-2026-101955
    Read original (opens in a new tab)
  4. NVD

    CVE-2026-101951 — An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent configured BGP peer to cause a denial of service by sending a specifically malformed BGP MCAST-TREE update and this NLRI is then attempted to be readvertised.

    CVE-2026-101951
    Read original (opens in a new tab)
  5. NVD

    CVE-2026-101950 — A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthe…

    Critical · CVSS 4.0 9.3 · Assessor: [email protected]

    A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured for Secure Vector Routing.

    CVE-2026-101950
    Read original (opens in a new tab)
  6. NVD

    CVE-2026-101948 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evol…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session.

    CVE-2026-101948
    Read original (opens in a new tab)
  7. NVD

    CVE-2026-101946 — An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent…

    Medium · CVSS 4.0 5.3 · Assessor: [email protected]

    An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process memory and disrupt an LDP adjacency via an IPv6 LDP message.

    CVE-2026-101946
    Read original (opens in a new tab)
  8. NVD

    CVE-2026-101945 — An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing instances and can disrupt control-plane adjacencies.

    CVE-2026-101945
    Read original (opens in a new tab)
  9. NVD

    CVE-2026-101944 — An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.

    CVE-2026-101944
    Read original (opens in a new tab)
  10. NVD

    CVE-2026-101943 — An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Ev…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.

    CVE-2026-101943
    Read original (opens in a new tab)
  11. NVD

    CVE-2026-101942 — An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from a configured EVPN peer and processed during re-advertisement.

    CVE-2026-101942
    Read original (opens in a new tab)
  12. NVD

    CVE-2026-101941 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evol…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled.

    CVE-2026-101941
    Read original (opens in a new tab)
  13. NVD

    CVE-2026-101940 — A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.

    CVE-2026-101940
    Read original (opens in a new tab)
  14. NVD

    CVE-2026-101939 — A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evol…

    High · CVSS 4.0 8.7 · Assessor: [email protected]

    A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table ` is configured to reference a routing table that does not exist.

    CVE-2026-101939
    Read original (opens in a new tab)
  15. NVD

    CVE-2026-101938 — An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on t…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session.

    CVE-2026-101938
    Read original (opens in a new tab)
  16. NVD

    CVE-2026-101937 — A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an a…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the data plane via chassis-cluster fabric traffic.

    CVE-2026-101937
    Read original (opens in a new tab)
  17. NVD

    CVE-2026-101936 — A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent netw…

    High · CVSS 4.0 7.1 · Assessor: [email protected]

    A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces.

    CVE-2026-101936
    Read original (opens in a new tab)
  19. NVD

    CVE-2026-101927 — A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allo…

    High · CVSS 4.0 8.6 · Assessor: [email protected]

    A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of service (DoS) or achieve privilege escalation to root via crafted IPC event messages.

    CVE-2026-101927
    Read original (opens in a new tab)
  20. NVD

    CVE-2026-100236 — A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that th…

    High · CVSS 3.1 8.6 · Assessor: [email protected]

    A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the destination buffer, and a header longer than the configured GSO segment size can underflow the payload-size calculation. A remote or guest-supplied packet processed with software GSO can trigger an out-of-bounds read or write.

    CVE-2026-100236
    Read original (opens in a new tab)
  21. NVD

    CVE-2016-15060 — A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Ha…

    Medium · CVSS 4.0 5.5 · Assessor: [email protected]

    A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

    CVE-2016-15060
    Read original (opens in a new tab)
  22. NVD

    CVE-2026-93683 — A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table lengt…

    Medium · CVSS 3.1 6.4 · Assessor: [email protected]

    A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a host copy before validating that length. A guest that changes the length between those reads, or that supplies an out-of-range next index on a small host copy in the vDPA relay path, can cause the host vhost process to walk past the validated mapping or heap copy. That can crash or disrupt the vhost process. Out-of-bounds bytes are consume…

    CVE-2026-93683
    Read original (opens in a new tab)
  23. NVD

    CVE-2026-91883 — Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File…

    Medium · CVSS 3.1 4.3 · Assessor: [email protected]

    Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

    CVE-2026-91883
    Read original (opens in a new tab)
  24. NVD

    CVE-2026-91882 — Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externall…

    High · CVSS 3.1 8.6 · Assessor: [email protected]

    Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.

    CVE-2026-91882
    Read original (opens in a new tab)
  25. NVD

    CVE-2026-91881 — Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in t…

    Critical · CVSS 3.1 9.0 · Assessor: [email protected]

    Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure and unauthorized access. This is a Critical severity vulnerability as it allows an unauthenticated attacker to intercept all Redfish BMC traffic including credentials by performing a man-in-the-middle attack, since TLS certificate verificati…

    CVE-2026-91881
    Read original (opens in a new tab)

Summaries are excerpts from the publishers. The default Advisories view includes CISA KEV, CISA Industrial and CERT-EU. When several scores exist, PATCHBAY shows the newest valid CVSS version, then prefers a primary assessment, NVD, and a stable assessor ordering. Open the original for all assessments. CISA Known Exploited dates indicate catalog additions. This product uses data from the NVD API but is not endorsed or certified by the NVD.