DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Juniper JUNOS und JUNOS Evolved: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2026-07-08
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS, JUNOS Evolved, Juniper EX Series, Juniper MX Series, Juniper QFX Series und Juniper SRX Series ausnutzen, um einen Denial of Service Zustand herbeizuführen, um Informationen offenzulegen, um Code auszuführen und um ein undefiniertes Verhalten auszulösen.
01
beschreibt (23)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-57054US | — | — | ||
A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacke… | ||||
| CVE-2026-57032US | — | — | ||
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker… | ||||
| CVE-2026-57031US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on MX Series allows adjacent subscribers to… | ||||
| CVE-2026-57030US | — | — | ||
A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SR… | ||||
| CVE-2026-57029US | — | — | ||
A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Junos OS Evolved on QFX Series allows an adjacent, unauthenticated attacker to cause a Den… | ||||
| CVE-2026-57028US | — | — | ||
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause… | ||||
| CVE-2026-57027US | — | — | ||
A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX Series devices allows an unauth… | ||||
| CVE-2026-57026US | — | — | ||
An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticate… | ||||
| CVE-2026-57025US | — | — | ||
A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to… | ||||
| CVE-2026-57024US | — | — | ||
A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated,… | ||||
| CVE-2026-57023US | — | — | ||
An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of Juniper Networks Junos OS on MX Series with SPC3, and SRX Series allows an unauthenti… | ||||
| CVE-2026-57022US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an un… | ||||
| CVE-2026-57021US | — | — | ||
An Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial… | ||||
| CVE-2026-57020US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticate… | ||||
| CVE-2026-57019US | — | — | ||
An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjac… | ||||
| CVE-2026-33803US | — | — | ||
An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause… | ||||
| CVE-2026-33802US | —OT erhöht | — | ||
A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS).
On EX2300,… | ||||
| CVE-2026-33801US | — | — | ||
An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, una… | ||||
| CVE-2026-33800US | — | — | ||
An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to… | ||||
| CVE-2026-33799US | — | — | ||
An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker sending specific va… | ||||
20 von 23 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Juniper Security Bulletin: Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash (CVE-2026-57032) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command (CVE-2026-33802) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash (CVE-2026-57027) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVE-2026-33803) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVE-2026-57028) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash (CVE-2026-33794) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash (CVE-2026-57029) vom 2026-07-08external
- Juniper Security Bulletin: Junos OS Evolved: URL handling vulnerability in libfetch results in heap buffer overflow (CVE-2020-7450) vom 2026-07-08external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan