{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Juniper Networks vulnerabilities","home_page_url":"https://patchfirst.co/vendor/juniper/","feed_url":"https://patchfirst.co/feed/vendor/juniper.json","description":"New and newly exploited Juniper Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-103406","url":"https://patchfirst.co/cve/CVE-2026-103406/","title":"CVE-2026-103406: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…","content_text":"Juniper Networks · Session Smart Conductor. Not in CISA KEV. EPSS 0.5% (higher than 43.9% of CVEs). CVSS 9.8 CRITICAL. Priority 15.6 of 100.","summary":"An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-28T17:17:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.6,"kev":null,"epss":{"score":0.00516,"percentile":0.4393},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Session Smart Conductor","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-103409","url":"https://patchfirst.co/cve/CVE-2026-103409/","title":"CVE-2026-103409: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…","content_text":"Juniper Networks · Session Smart Router. Not in CISA KEV. EPSS 0.3% (higher than 28.4% of CVEs). CVSS 9.8 CRITICAL. Priority 12.5 of 100.","summary":"A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…","date_published":"2026-10-28T00:00:00.000Z","date_modified":"2026-10-28T17:17:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.5,"kev":null,"epss":{"score":0.00347,"percentile":0.28362},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Session Smart Router","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102031","url":"https://patchfirst.co/cve/CVE-2026-102031/","title":"CVE-2026-102031: An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged…","content_text":"Juniper Networks · Junos OS Evolved. Not in CISA KEV. EPSS 2.1% (higher than 81.7% of CVEs). CVSS 9.8 CRITICAL. Priority 23.2 of 100.","summary":"An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:17:00.000Z","tags":[],"_patchfirst":{"reason":"published","priority":23.2,"kev":null,"epss":{"score":0.02101,"percentile":0.81715},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS Evolved","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101956","url":"https://patchfirst.co/cve/CVE-2026-101956/","title":"CVE-2026-101956: An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.8% (higher than 55% of CVEs). CVSS 9.8 CRITICAL. Priority 17.9 of 100.","summary":"An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.9,"kev":null,"epss":{"score":0.0075,"percentile":0.54961},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102175","url":"https://patchfirst.co/cve/CVE-2026-102175/","title":"CVE-2026-102175: A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.7% (higher than 54.4% of CVEs). CVSS 9.8 CRITICAL. Priority 17.7 of 100.","summary":"A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:17:01.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.7,"kev":null,"epss":{"score":0.00734,"percentile":0.54434},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33789","url":"https://patchfirst.co/cve/CVE-2026-33789/","title":"CVE-2026-33789: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.7% (higher than 52.7% of CVEs). CVSS 9.8 CRITICAL. Priority 17.4 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.4,"kev":null,"epss":{"score":0.00688,"percentile":0.52719},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33792","url":"https://patchfirst.co/cve/CVE-2026-33792/","title":"CVE-2026-33792: A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 49.3% of CVEs). CVSS 9.8 CRITICAL. Priority 16.7 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.7,"kev":null,"epss":{"score":0.00611,"percentile":0.49262},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101982","url":"https://patchfirst.co/cve/CVE-2026-101982/","title":"CVE-2026-101982: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:16:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.3,"kev":null,"epss":{"score":0.00568,"percentile":0.47079},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101990","url":"https://patchfirst.co/cve/CVE-2026-101990/","title":"CVE-2026-101990: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 47.1% of CVEs). CVSS 9.8 CRITICAL. Priority 16.3 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-30T18:42:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.3,"kev":null,"epss":{"score":0.00568,"percentile":0.4708},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-33796","url":"https://patchfirst.co/cve/CVE-2026-33796/","title":"CVE-2026-33796: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.6% (higher than 46.5% of CVEs). CVSS 9.8 CRITICAL. Priority 16.2 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.2,"kev":null,"epss":{"score":0.00558,"percentile":0.46528},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101986","url":"https://patchfirst.co/cve/CVE-2026-101986/","title":"CVE-2026-101986: An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 46% of CVEs). CVSS 9.8 CRITICAL. Priority 16.1 of 100.","summary":"An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-30T18:45:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.1,"kev":null,"epss":{"score":0.00549,"percentile":0.46003},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101983","url":"https://patchfirst.co/cve/CVE-2026-101983/","title":"CVE-2026-101983: A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 45.4% of CVEs). CVSS 9.8 CRITICAL. Priority 15.9 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:24:19.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.9,"kev":null,"epss":{"score":0.0054,"percentile":0.45442},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101954","url":"https://patchfirst.co/cve/CVE-2026-101954/","title":"CVE-2026-101954: An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 41.2% of CVEs). CVSS 9.8 CRITICAL. Priority 15.1 of 100.","summary":"An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T15:16:59.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00477,"percentile":0.41244},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101980","url":"https://patchfirst.co/cve/CVE-2026-101980/","title":"CVE-2026-101980: An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 40.7% of CVEs). CVSS 9.8 CRITICAL. Priority 15.0 of 100.","summary":"An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-15T16:23:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15,"kev":null,"epss":{"score":0.00471,"percentile":0.40736},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-101950","url":"https://patchfirst.co/cve/CVE-2026-101950/","title":"CVE-2026-101950: A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 40.6% of CVEs). CVSS 9.8 CRITICAL. Priority 15.0 of 100.","summary":"A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-17T04:16:46.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15,"kev":null,"epss":{"score":0.00468,"percentile":0.40553},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102178","url":"https://patchfirst.co/cve/CVE-2026-102178/","title":"CVE-2026-102178: A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.5% (higher than 39.5% of CVEs). CVSS 9.8 CRITICAL. Priority 14.8 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-16T17:17:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":14.8,"kev":null,"epss":{"score":0.00455,"percentile":0.39491},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102182","url":"https://patchfirst.co/cve/CVE-2026-102182/","title":"CVE-2026-102182: A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.4% (higher than 35.4% of CVEs). CVSS 9.8 CRITICAL. Priority 13.9 of 100.","summary":"A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an…","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-20T21:17:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":13.9,"kev":null,"epss":{"score":0.00411,"percentile":0.35379},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-21902","url":"https://patchfirst.co/cve/CVE-2026-21902/","title":"CVE-2026-21902: Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root","content_text":"Juniper Networks · Junos OS Evolved. Not in CISA KEV. EPSS 18.5% (higher than 97.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 71.3 of 100.","summary":"Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root","date_published":"2026-02-25T00:00:00.000Z","date_modified":"2026-03-04T04:55:12.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":71.3,"kev":null,"epss":{"score":0.18476,"percentile":0.97243},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS Evolved","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2015-7755#kev","url":"https://patchfirst.co/cve/CVE-2015-7755/","title":"[KEV] CVE-2015-7755: Juniper ScreenOS Improper Authentication Vulnerability","content_text":"Juniper · ScreenOS. In CISA KEV since 2025-10-02. ENISA EUVD lists it as exploited. EPSS 61.1% (higher than 99.16% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1021.004 SSH. Priority 69.7 of 100.","summary":"Juniper ScreenOS Improper Authentication Vulnerability","date_published":"2025-10-02T00:00:00.000Z","date_modified":"2026-06-17T00:33:04.000Z","tags":["kev","public-exploit","T1078","T1021.004"],"_patchfirst":{"reason":"kev","priority":69.7,"kev":{"dateAdded":"2025-10-02","ransomware":false},"epss":{"score":0.61139,"percentile":0.9916},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper","product":"ScreenOS","techniqueIds":["T1078","T1021.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-21590#kev","url":"https://patchfirst.co/cve/CVE-2025-21590/","title":"[KEV] CVE-2025-21590: Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2025-03-13. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.9% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 57.5 of 100.","summary":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","date_published":"2025-03-13T00:00:00.000Z","date_modified":"2026-10-01T18:23:34.000Z","tags":["kev","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":57.5,"kev":{"dateAdded":"2025-03-13","ransomware":false},"epss":{"score":0.01749,"percentile":0.77855},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1068","T1059"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2024-21620","url":"https://patchfirst.co/cve/CVE-2024-21620/","title":"CVE-2024-21620: Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.8 HIGH. Priority 53.1 of 100.","summary":"Junos OS: SRX Series and EX Series: J-Web doesn't sufficiently sanitize input to prevent XSS","date_published":"2024-01-25T00:00:00.000Z","date_modified":"2025-05-29T15:18:51.000Z","tags":[],"_patchfirst":{"reason":"published","priority":53.1,"kev":null,"epss":{"score":0.00908,"percentile":0.59926},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-36844#kev","url":"https://patchfirst.co/cve/CVE-2023-36844/","title":"[KEV] CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 90.0% (higher than 99.79% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 73.7 of 100.","summary":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:12.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":73.7,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.89958,"percentile":0.99793},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36847#kev","url":"https://patchfirst.co/cve/CVE-2023-36847/","title":"[KEV] CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 83.5% (higher than 99.68% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.6 of 100.","summary":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:13.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":68.6,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.83455,"percentile":0.99683},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2023-36845#kev","url":"https://patchfirst.co/cve/CVE-2023-36845/","title":"[KEV] CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 95.1% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 66.8 of 100.","summary":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:12.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.9507,"percentile":0.99862},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36846#kev","url":"https://patchfirst.co/cve/CVE-2023-36846/","title":"[KEV] CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 93.5% (higher than 99.84% of CVEs). CVSS 5.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 63.7 of 100.","summary":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:12.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":63.7,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.93473,"percentile":0.99839},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-36851#kev","url":"https://patchfirst.co/cve/CVE-2023-36851/","title":"[KEV] CVE-2023-36851: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2023-11-13. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 66.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 52.0 of 100.","summary":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","date_published":"2023-11-13T00:00:00.000Z","date_modified":"2026-06-17T06:07:13.000Z","tags":["kev","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":52,"kev":{"dateAdded":"2023-11-13","ransomware":false},"epss":{"score":0.01123,"percentile":0.66255},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-22242","url":"https://patchfirst.co/cve/CVE-2022-22242/","title":"CVE-2022-22242: Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 3.4% (higher than 88.9% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. Priority 62.1 of 100.","summary":"Junos OS: Cross-site Scripting (XSS) vulnerability in J-Web","date_published":"2022-10-18T00:00:00.000Z","date_modified":"2025-05-09T15:36:51.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":62.1,"kev":null,"epss":{"score":0.03431,"percentile":0.88944},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-22241","url":"https://patchfirst.co/cve/CVE-2022-22241/","title":"CVE-2022-22241: Junos OS: Vulnerability in J-Web may allow deserialization without authentication","content_text":"Juniper Networks · Junos OS. Not in CISA KEV. EPSS 1.3% (higher than 70.4% of CVEs). CVSS 8.1 HIGH. Priority 54.7 of 100.","summary":"Junos OS: Vulnerability in J-Web may allow deserialization without authentication","date_published":"2022-10-18T00:00:00.000Z","date_modified":"2025-05-09T15:37:15.000Z","tags":[],"_patchfirst":{"reason":"published","priority":54.7,"kev":null,"epss":{"score":0.01296,"percentile":0.7036},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Juniper Networks","product":"Junos OS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-1631#kev","url":"https://patchfirst.co/cve/CVE-2020-1631/","title":"[KEV] CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability","content_text":"Juniper · Junos OS. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter. Priority 60.3 of 100.","summary":"Juniper Junos OS Path Traversal Vulnerability","date_published":"2022-03-25T00:00:00.000Z","date_modified":"2026-06-17T03:02:02.000Z","tags":["kev","T1190","T1005","T1059"],"_patchfirst":{"reason":"kev","priority":60.3,"kev":{"dateAdded":"2022-03-25","ransomware":false},"epss":{"score":0.04865,"percentile":0.92043},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Juniper","product":"Junos OS","techniqueIds":["T1190","T1005","T1059"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}}]}