SecAlerts
J

Juniper Networks

Security Risk Profile

52
/100
medium

Security Risk Score

Comprehensive risk assessment based on 450 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from August 17, 2023 to present

450
Total CVEs
325
Critical+High
8
Exploited
206
Unpatched

Threat Assessment

Avg CVSS
7.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
206
Critical/High
Risk Level
52/100
medium
⚠️ 8 Active Exploits⚡ 3 Zero-Days🆕 18Fresh (<7d)📈 171 in Last 30 Days

Severity Distribution

Critical
35
High
290
Medium
116
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
48

Age Distribution

Common Weaknesses (CWE)

1
Buffer Overflow
39
2
Null Pointer Dereference
26
3
XSS
26
4
OS Command Injection
12
5
Command Injection
12

Most Affected Products

1. Juniper Junos9257
2. Juniper Junos OS Evolved5277
3. Juniper JUNOS1153
4. Juniper Networks Junos OS354
5. Juniper Networks Junos OS Evolved249

Recent Vulnerabilities

See more →
CVE-2026-106079
CVSS 8.8high

Session Smart Router and Session Smart Conductor: Improper validation of a field causes privilege escalation when updating the YANG configuration

Oct 28, 2026🔧 No Patch
CVE-2026-103411
CVSS 7.1high

Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing

Oct 28, 2026🔧 No Patch
CVE-2026-103410
CVSS 7.5high

Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection

Oct 28, 2026🔧 No Patch
CVE-2026-103409
CVSS 9.8critical

Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed

Oct 28, 2026🔧 No Patch
CVE-2026-103408
CVSS 8.8high

Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options

Oct 28, 2026🔧 No Patch
CVE-2026-103407
CVSS 8.8high

Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management

Oct 28, 2026🔧 No Patch
CVE-2026-103406
CVSS 9.8critical

Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management.

Oct 28, 2026🔧 No Patch
CVE-2026-103405
CVSS 5.8medium

Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting

Oct 28, 2026🔧 No Patch
CVE-2026-103404
CVSS 6.8medium

Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials

Oct 28, 2026🔧 No Patch
CVE-2026-103403
CVSS 8.8high

Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules

Oct 28, 2026🔧 No Patch

Monitor Juniper Networks in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.