# Juniper Networks vulnerabilities Source: https://junglewise.ai/threats/vendors/juniper-networks Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/juniper-networks.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 85 vulnerabilities in Juniper Networks: 0 in the last 7 days and 69 in the last 90 days, 14 of them critical and 3 exploited in the wild. The most recent, CVE-2026-106079, was published on 28 October 2026. 69 vulnerabilities in the last four weeks, up from none in the four before. 10 critical against 0. 4 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 69 - Last 90 days: 69 - All time: 85 (14 critical, 3 exploited in the wild) ## About Juniper Networks An American multinational corporation that develops and markets networking products. ## Latest Juniper Networks vulnerabilities - [CVE-2026-106079: Juniper Session Smart Router OS command injection in AccessManager](https://junglewise.ai/threats/cve-2026-106079-an-improper-neutralization-of-special-elements-used-in-an-os) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-103411: Juniper Networks Session Smart Router integer underflow in DHCP decoder](https://junglewise.ai/threats/cve-2026-103411-an-integer-underflow-vulnerability-in-dhcpmessagedecoder-in) (high, CVSS 7.1, published 28 Oct 2026) - [CVE-2026-103410: Juniper Networks Session Smart Router integer overflow in DPI certificate scanner](https://junglewise.ai/threats/cve-2026-103410-an-integer-overflow-vulnerability-in-the-dpi-certificate-scanner) (high, CVSS 7.5, published 28 Oct 2026) - [CVE-2026-103409: Juniper Networks Session Smart Router missing authentication](https://junglewise.ai/threats/cve-2026-103409-a-missing-authentication-for-critical-function-vulnerability-in) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-103408: Juniper Networks Session Smart Router stack buffer overflow in DHCP client](https://junglewise.ai/threats/cve-2026-103408-a-stack-buffer-overflow-vulnerability-in-the-dhcp-client-in) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-103407: Juniper Networks Session Smart Router path traversal in ConfigDirector](https://junglewise.ai/threats/cve-2026-103407-an-improper-limitation-of-a-pathname-to-a-restricted-directory) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-103406: Juniper Networks Session Smart Conductor command injection in AutomatedProvisioner](https://junglewise.ai/threats/cve-2026-103406-an-improper-neutralization-of-special-elements-used-in-an-os) (critical, CVSS 9.8, published 28 Oct 2026) - [CVE-2026-103405: Juniper Networks Session Smart Router HTTP header injection in web server](https://junglewise.ai/threats/cve-2026-103405-an-improper-neutralization-of-special-elements-in-output-used-by) (medium, CVSS 5.8, published 28 Oct 2026) - [CVE-2026-103404: Juniper Networks Session Smart Conductor privilege escalation in RoutingManager](https://junglewise.ai/threats/cve-2026-103404-an-incorrect-permission-assignment-for-critical-resource) (medium, CVSS 6.8, published 28 Oct 2026) - [CVE-2026-103403: Juniper Session Smart Router OS command injection in AccessManager](https://junglewise.ai/threats/cve-2026-103403-an-improper-neutralization-of-special-elements-used-in-an-os) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-103402: Juniper Session Smart Router/Conductor cache injection privilege escalation](https://junglewise.ai/threats/cve-2026-103402-an-insufficient-verification-of-data-authenticity-vulnerability) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-103401: Juniper Session Smart Router link following arbitrary file overwrite](https://junglewise.ai/threats/cve-2026-103401-an-improper-link-resolution-before-file-access-link-following) (high, CVSS 8.8, published 28 Oct 2026) - [CVE-2026-103400: Juniper Session Smart Router/Conductor ember service injection](https://junglewise.ai/threats/cve-2026-103400-an-improper-neutralization-of-special-elements-in-output-used-by) (medium, CVSS 5.5, published 28 Oct 2026) - [CVE-2026-103393: Juniper Networks Session Smart Router VRRP out-of-bounds read](https://junglewise.ai/threats/cve-2026-103393-an-out-of-bounds-read-vulnerability-in-the-vrrp-implementation) (medium, CVSS 4.3, published 28 Oct 2026) - [CVE-2026-103392: Juniper Networks Session Smart Router TCP out-of-bounds write](https://junglewise.ai/threats/cve-2026-103392-an-out-of-bounds-write-vulnerability-in-the-tcp-header) (medium, CVSS 4.8, published 28 Oct 2026) - [CVE-2026-103391: Juniper Networks Session Smart Router out-of-bounds write in TCP proxy](https://junglewise.ai/threats/cve-2026-103391-an-out-of-bounds-write-vulnerability-in-the-ssr-tcp-proxy) (medium, CVSS 5.3, published 28 Oct 2026) - [CVE-2026-103390: Juniper Networks Session Smart Router and Conductor out-of-bounds read in HTTP parser](https://junglewise.ai/threats/cve-2026-103390-an-out-of-bounds-read-vulnerability-in-the-httpparser-component) (medium, CVSS 5.3, published 28 Oct 2026) - [CVE-2026-101982: Juniper Networks Junos OS stack buffer overflow in BGP/EVPN](https://junglewise.ai/threats/cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-101981: Juniper Networks Junos OS stack buffer overflow in rpd](https://junglewise.ai/threats/cve-2026-101981-a-stack-based-buffer-overflow-vulnerability-in-the-routing) (high, CVSS 8.8, published 14 Oct 2026) - [CVE-2026-101952: Juniper Junos OS routing protocol daemon crash in ISO-VPN](https://junglewise.ai/threats/cve-2026-101952-an-improper-validation-of-consistency-within-input-vulnerability) (high, CVSS 7.5, published 14 Oct 2026) - [CVE-2026-102182: Juniper Junos OS stack buffer overflow in kmd component](https://junglewise.ai/threats/cve-2026-102182-a-stack-based-buffer-overflow-vulnerability-in-the-kmd-component) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-102178: Juniper Networks Junos OS stack buffer overflow in BGP routing daemon](https://junglewise.ai/threats/cve-2026-102178-a-stack-based-buffer-overflow-vulnerability-in-the-bgp-routing) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-102176: Juniper Junos buffer overflow in SDK service process](https://junglewise.ai/threats/cve-2026-102176-a-buffer-copy-without-checking-size-of-input-classic-buffer) (high, CVSS 8.8, published 14 Oct 2026) - [CVE-2026-102175: Juniper Junos OS heap buffer overflow in sdxd daemon](https://junglewise.ai/threats/cve-2026-102175-a-heap-based-buffer-overflow-vulnerability-in-the-sdxd-service) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-102174: Juniper Junos OS SRX stack-based buffer overflow in iked](https://junglewise.ai/threats/cve-2026-102174-a-stack-based-buffer-overflow-vulnerability-in-the-iked-ike-key) (high, CVSS 8.8, published 14 Oct 2026) ## Most severe Juniper Networks vulnerabilities - [CVE-2015-7755: Juniper ScreenOS improper authentication in SSH and Telnet](https://junglewise.ai/threats/cve-2015-7755-juniper-screenos-improper-authentication-in-ssh-and-telnet) (critical, exploited in the wild, CVSS 9.8, published 2 Oct 2025) - [CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability](https://junglewise.ai/threats/cve-2020-1631-juniper-junos-os-path-traversal-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability](https://junglewise.ai/threats/cve-2025-21590-juniper-junos-os-improper-isolation-or-compartmentalization) (critical, exploited in the wild, CVSS 6.7, published 13 Mar 2025) - [CVE-2026-102031: Juniper Networks Junos OS Evolved command injection in TACACS](https://junglewise.ai/threats/cve-2026-102031-an-os-command-injection-vulnerability-in-tacacs-of-juniper) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-102175: Juniper Junos OS heap buffer overflow in sdxd daemon](https://junglewise.ai/threats/cve-2026-102175-a-heap-based-buffer-overflow-vulnerability-in-the-sdxd-service) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-101986: Juniper Networks Junos OS authentication bypass in J-Web](https://junglewise.ai/threats/cve-2026-101986-an-improper-authentication-vulnerability-in-j-web-of-juniper) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-101982: Juniper Networks Junos OS stack buffer overflow in BGP/EVPN](https://junglewise.ai/threats/cve-2026-101982-a-stack-based-buffer-overflow-vulnerability-in-the-routing) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-101990: Juniper Junos OS stack buffer overflow in routing protocol daemon](https://junglewise.ai/threats/cve-2026-101990-a-stack-based-buffer-overflow-vulnerability-in-the-routing) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-101950: Juniper Junos OS SRX heap overflow in SVR component](https://junglewise.ai/threats/cve-2026-101950-a-heap-based-buffer-overflow-vulnerability-in-the-svr-component) (critical, CVSS 9.8, published 14 Oct 2026) - [CVE-2026-33784: Juniper Networks JSI vLWC use of default password](https://junglewise.ai/threats/cve-2026-33784-juniper-networks-jsi-vlwc-use-of-default-password) (critical, CVSS 9.8, published 9 Apr 2026) ## Vulnerabilities per week 69 vulnerabilities in the last four weeks, up from none in the four before. 10 critical against 0. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 52 | 8 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 17 | 2 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Juniper Networks technologies - [Juniper Networks Junos OS Evolved](https://junglewise.ai/threats/technologies/junos-os-evolved): 53 vulnerabilities - [Juniper Networks Junos OS](https://junglewise.ai/threats/technologies/juniper-networks-junos-os): 47 vulnerabilities - [Juniper Networks Session Smart Router](https://junglewise.ai/threats/technologies/session-smart-router): 15 vulnerabilities - [Juniper Networks Session Smart Conductor](https://junglewise.ai/threats/technologies/session-smart-conductor): 10 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Juniper Networks vulnerabilities", https://junglewise.ai/threats/vendors/juniper-networks, 9 November 2026.