Juniper JUNOS OS

productDE

cpe:/o:juniper:junos:os

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high2medium0low

updated 2026-10-28

vulnerabilities (51)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-21915US	—	2.24% (83rd)	—	no fix	2026-04-09	—
CVE-2022-24805US	high8.8	1.30% (70th)	—	no fix	2024-04-16	—
CVE-2026-33791US	—	0.69% (53rd)	—	no fix	2026-04-09	—
CVE-2025-60011US	—	0.46% (40th)	—	no fix	2026-01-15	—
CVE-2026-33784US	—OT elevated	0.46% (39th)	—	no fix	2026-04-09	—
CVE-2025-60004US	—	0.42% (36th)	—	no fix	2025-10-09	—
CVE-2025-59975US	—	0.41% (35th)	—	no fix	2025-10-09	—
CVE-2025-60003US	—	0.41% (35th)	—	no fix	2026-01-15	—
CVE-2026-21918US	—	0.41% (35th)	—	no fix	2026-01-15	—
CVE-2026-21905US	—	0.41% (35th)	—	no fix	2026-01-15	—
CVE-2026-21903US	—	0.40% (34th)	—	no fix	2026-01-15	—
CVE-2026-21921US	—	0.37% (31st)	—	no fix	2026-01-15	—
CVE-2025-59964US	—	0.36% (29th)	—	no fix	2025-10-09	—
CVE-2026-33778US	—	0.34% (27th)	—	no fix	2026-04-09	—
CVE-2025-52960US	—	0.33% (26th)	—	no fix	2025-10-09	—
CVE-2026-33790US	—	0.32% (25th)	—	no fix	2026-04-09	—
CVE-2026-21908US	—	0.31% (24th)	—	no fix	2026-01-15	—
CVE-2025-59980US	—	0.29% (22nd)	—	no fix	2025-10-09	—
CVE-2026-33782US	—	0.29% (21st)	—	no fix	2026-04-09	—
CVE-2025-59976US	—	0.29% (21st)	—	no fix	2025-10-09	—
CVE-2026-33771US	high8.1	0.26% (18th)	—	no fix	2026-04-09	—
CVE-2026-21910US	—	0.26% (18th)	—	no fix	2026-01-15	—
CVE-2026-0203US	—	0.26% (18th)	—	no fix	2026-01-15	—
CVE-2025-59960US	—	0.25% (17th)	—	no fix	2026-01-15	—
CVE-2026-21909US	—	0.25% (16th)	—	no fix	2026-01-15	—
CVE-2026-33783US	—	0.24% (15th)	—	no fix	2026-04-09	—
CVE-2026-21919US	—	0.23% (14th)	—	no fix	2026-04-09	—
CVE-2026-33773US	—	0.20% (10th)	—	no fix	2026-04-09	—
CVE-2026-33775US	—	0.19% (9th)	—	no fix	2026-04-09	—
CVE-2025-59957US	—	0.18% (8th)	—	no fix	2025-10-09	—
CVE-2025-59969US	—	0.18% (8th)	—	no fix	2026-04-09	—
CVE-2025-59962US	—	0.18% (7th)	—	no fix	2025-10-09	—
CVE-2025-60010US	—	0.18% (7th)	—	no fix	2025-10-09	—
CVE-2026-33774US	medium5.3	0.17% (7th)	—	no fix	2026-04-09	—
CVE-2026-33780US	—	0.17% (7th)	—	no fix	2026-04-09	—
CVE-2026-33797US	—	0.17% (6th)	—	no fix	2026-04-09	—
CVE-2026-33781US	—	0.17% (6th)	—	no fix	2026-04-09	—
CVE-2026-33793US	—	0.16% (5th)	—	no fix	2026-04-09	—
CVE-2025-60007US	—	0.14% (4th)	—	no fix	2026-01-15	—
CVE-2025-59959US	—	0.14% (4th)	—	no fix	2026-01-15	—
CVE-2026-33785US	—OT elevated	0.14% (3rd)	—	no fix	2026-04-09	—
CVE-2025-30650US	—OT elevated	0.14% (3rd)	—	no fix	2026-04-08	—
CVE-2025-59961US	—	0.13% (3rd)	—	no fix	2026-01-15	—
CVE-2026-21916US	—	0.13% (3rd)	—	no fix	2026-04-09	—
CVE-2026-33779US	—	0.12% (2nd)	—	no fix	2026-04-09	—
CVE-2026-33788US	—OT elevated	0.11% (2nd)	—	no fix	2026-04-09	—
CVE-2026-21912US	medium4.7	0.11% (1st)	—	no fix	2026-01-15	—
CVE-2026-33786US	—	0.10% (1st)	—	no fix	2026-04-09	—
CVE-2026-33787US	—	0.09% (1st)	—	no fix	2026-04-09	—
CVE-2026-33776US	—OT elevated	0.09% (0th)	—	no fix	2026-04-09	—

showing 50 of 51

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-754Improper Check for Unusual or Exceptional Conditions9 CVEs
CWE-401Missing Release of Memory after Effective Lifetime4 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-416Use After Free2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-862Missing Authorization2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)51 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan