Vulnerabilities · 6h ago
Juniper published an advisory covering 106 Junos OS and Junos OS Evolved flaws, including 9 critical issues, across many release lines. The affected builds span multiple Junos trains; INCIBE-CERT says the bugs can lead to root-level code execution, authentication bypass, information disclosure, service denial, and control of the device.
Several of the critical flaws sit in paths routers treat as trusted: configured BGP or BGP/EVPN peers, plus management components such as J-Web and NETCONF. In plain terms, a crafted routing update or web request can be accepted as if it came from a neighbor or logged-in admin, which is how a router can move from a bug to control-plane compromise.
For operators running Junos at the edge or in carrier cores, the exposure is not just one box crashing. A compromised routing engine can change path selection, blackhole traffic, or leak routes, and systems that expose peer or management interfaces inherit that trust risk until the affected releases are replaced.
CVEs in this update
9 CVEs
Across Junos OS, Junos OS Evolved.
9 critical · 0 high · 0 medium · 0 low
0 in CISA KEV · 0 with EPSS above 1%
Highest severity: CVE-2026-101990 · 9.8 CRITICAL
2 sources covering this story
Juniper Networks: risolte vulnerabilità in Junos OS e Junos OS Evolved
Juniper Networks ha rilasciato aggiornamenti per risolvere numerose vulnerabilità, di cui 23 con gravità "critica" e 119 con gravità “alta”, nei sistemi operativi Junos OS e Junos OS Evolved.
Múltiples vulnerabilidades en productos de Juniper Networks
Juniper Networks ha publicado 106 vulnerabilidades: 9 de severidad crítica, 88 de severidad alta y 9 d
Part of the PlainSec briefing for 2026-10-15