CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.16)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to crash or execute code with root privileges via a malicious RADIUS response.
A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.
An SQL injection vulnerability in the ipfd component of Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection.
An improper handling of length parameter inconsistency in the l2ald daemon of Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed ICCP message.
An OS command injection vulnerability in the bootzd zero-touch provisioning daemon of Junos OS Evolved on PTX Series allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted gRPC response.
A NULL pointer dereference vulnerability in the routing protocol daemon (rpd) of Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used.
A NULL pointer dereference vulnerability in the pkid component of Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.
An OS command injection vulnerability in the bootzd zero-touch provisioning daemon of Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via a crafted DHCP response.
A use of externally-controlled format string vulnerability in the jti-dialoutd of Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.
A use of externally-controlled format string vulnerability in the gRPC daemon of Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.
An improper initialization vulnerability in the routing protocol daemon (rpd) of Junos OS and Junos OS Evolved allows a remote BGP peer to cause an rpd crash via an LLGR-stale route update readvertised to a configured non-LLGR peer group.
A stack-based buffer overflow vulnerability in the UTM Anti-Spam SBL of Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code execution or a denial of service via an injected malformed DNS packet when Anti-Spam SBL inspection is enabled.
Improper validation of input consistency in the routing protocol daemon (rpd) of Junos OS and Junos OS Evolved allows a configured network-adjacent BGP peer to cause a denial of service by sending a specifically malformed BGP MCAST-TREE update that is then attempted to be re-advertised.
A NULL pointer dereference vulnerability in the routing protocol daemon (rpd) of Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session.
An integer overflow or wraparound vulnerability in the rpd process of Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing instances and can disrupt control-plane adjacencies.
An integer overflow or wraparound vulnerability in the routing protocol daemon (rpd) of Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.
An improper input validation vulnerability in the routing protocol daemon (rpd) of Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.
An improper handling of length parameter inconsistency vulnerability in the routing protocol daemon (rpd) process of Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from a configured EVPN peer and processed during re-advertisement.
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled.
A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS