CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 3,207 CVEs published, 239 critical, and 5 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
3,207
Show in the list
Critical, last 7 days
239
Show in the list
Healthcare-tagged, last 7 days
9
Show in the list
Known exploited (CISA KEV)
1,762
Show in the list

Showing CVEs that name the product juniper_networks:junos_os_evolved. Show all products

155 CVEs
Showing 1 to 10.
CVESeverityTitlePublished
CVE-2026-101954Critical 9.8Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover when J-Web is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-101952High 7.5Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
Assigned by juniper
Oct 14, 2026
CVE-2026-101949High 7.5Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a specific BGP update causes an rpd crash
Assigned by juniper
Oct 14, 2026
CVE-2026-101964Medium 6.5Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP message
Assigned by juniper
Oct 14, 2026
CVE-2026-101963High 7.5Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihoming is used
Assigned by juniper
Oct 14, 2026
CVE-2026-101962High 7.5Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash when BGP EVPN signaling is used
Assigned by juniper
Oct 14, 2026
CVE-2026-101961High 7.5Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy
Assigned by juniper
Oct 14, 2026
CVE-2026-101959Medium 6.5Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash
Assigned by juniper
Oct 14, 2026
CVE-2026-101983Critical 9.8Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual-domain is configured
Assigned by juniper
Oct 14, 2026
CVE-2026-101982Critical 9.8Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used
Assigned by juniper
Oct 14, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.