DeutschShown in its original language — a full translation is planned for a future version.
Juniper Junos OS, Junos Space: Mehrere Schwachstellen
view advisory published 2026-01-14
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS und Juniper Junos Space ausnutzen, um falsche Informationen darzustellen, beliebigen Code mit Root-Rechten auszuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand zu verursachen.
01
describes (24)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-21921US | — | — | ||
A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privileges… | ||||
| CVE-2026-21920US | — | — | ||
An Unchecked Return Value vulnerability in the DNS module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service… | ||||
| CVE-2026-21918US | — | — | ||
A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Den… | ||||
| CVE-2026-21917US | — | — | ||
An Improper Validation of Syntactic Correctness of Input vulnerability in the Web-Filtering module of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-bas… | ||||
| CVE-2026-21914US | — | — | ||
An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos).… | ||||
| CVE-2026-21913US | — | — | ||
An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthenticated, network-based at… | ||||
| CVE-2026-21912US | medium4.7 | — | ||
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in the method to collect FPC Ethernet firmware statistics of Juniper Networks Junos OS on MX10k Series allows a lo… | ||||
| CVE-2026-21911US | — | — | ||
An Incorrect Calculation vulnerability in the Layer 2 Control
Protocol
Daemon (l2cpd) of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker f… | ||||
| CVE-2026-21910US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms a… | ||||
| CVE-2026-21909US | — | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon (rpd) Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated att… | ||||
| CVE-2026-21908US | — | — | ||
A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, netw… | ||||
| CVE-2026-21907US | —OT elevated | — | ||
A Use of a Broken or Risky Cryptographic Algorithm vulnerability in the TLS/SSL server of Juniper Networks Junos Space allows the use of static key ciphers (ssl-static-key-ciphers)… | ||||
| CVE-2026-21906US | — | — | ||
An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-base… | ||||
| CVE-2026-21905US | — | — | ||
A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series and MX Series with MX-S… | ||||
| CVE-2026-21903US | — | — | ||
A Stack-based Buffer Overflow vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS allows a network-based attacker, authenticated with low privileges to… | ||||
| CVE-2026-0203US | — | — | ||
An Improper Handling of Exceptional Conditions vulnerability in packet processing of Juniper Networks Junos OS allows an unauthenticated, network-adjacent attacker sending a specif… | ||||
| CVE-2025-60011US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticat… | ||||
| CVE-2025-60007US | — | — | ||
A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges to cause… | ||||
| CVE-2025-60003US | — | — | ||
A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a… | ||||
| CVE-2025-59961US | — | — | ||
An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-pri… | ||||
showing 20 of 24
02
references
External citations — patches, advisories, analysis.
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
- Juniper Security Advisories vom 2026-01-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan