Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-101982 — Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise w…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on J…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-101981 — Junos OS and Junos OS Evolved: An adjacent LDP peer causes routing-engine compromise when…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or…

junos junos_os_evolved | Memory Corruption
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.8 HIGH
CVE-2026-101979 — Junos OS and Junos OS Evolved: A network attacker causes root-level code execution or den…

A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101976 — Junos OS and Junos OS Evolved: In a non-4byte-AS scenario a specific BGP update causes an…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability sendi…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101975 — Junos OS and Junos OS Evolved: Improper OSPF LSA validation causes an rpd crash when pref…

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic p…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101972 — Junos OS and Junos OS Evolved: Malformed OSPF packets causes routing disruption when OSPF…

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101964 — Junos OS and Junos OS Evolved: An attacker can cause an rpd crash via a crafted LDP messa…

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet r…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101963 — Junos OS and Junos OS Evolved: A BGP EVPN neighbor causes an rpd crash when SRv6 multihom…

An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihomi…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101962 — Junos OS and Junos OS Evolved: An attacker sending a malformed update causes an rpd crash…

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically m…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101961 — Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qua…

A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.1 HIGH
CVE-2026-101959 — Junos OS and Junos OS Evolved: A malformed LSP-ping causes an rpd crash

A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacen…

junos junos_os_evolved | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
9.8 CRITICAL
CVE-2026-101954 — Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover…

An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacke…

junos junos_os_evolved | Remote | Authentication
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.7 HIGH
CVE-2026-101952 — Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP…

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause a…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
8.7 HIGH
CVE-2026-101949 — Junos OS and Junos OS Evolved: In a scenario with VPN-flowspec and BMP monitoring a speci…

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of serv…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
7.0 HIGH
CVE-2026-100413 — SeaweedFS: Hard-coded SSH host key can be presented by certain standalone SFTP Helm deplo…

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sf…

seaweedfs | Remote | Misconfiguration
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.6 HIGH
CVE-2026-0322 — Palo Alto Networks PAN-OS Code Injection Vulnerability - [Actively Exploited]

A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbitrary code with roo…

pan-os prisma_access pan-os prisma_access prisma_access pan-os +2 more | CISA KEV Remote | Authentication
Oct 14, 2026 Oct 15, 2026
Oct 14, 2026
Oct 15, 2026
5.9 MEDIUM
CVE-2026-96596 — erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) and erlang rebar3 (…

erlang\/otp rebar3 otp hex_core hex | Denial of Service
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
8.2 HIGH
CVE-2026-94200 — TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension i…

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 server to cause a den…

erlang\/otp otp | Remote | Denial of Service
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
3.7 LOW
CVE-2026-93637 — Zimbra Collaboration Suite GraphQL Batched Authentication Bypasses Pre-Auth Rate Limiting

An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without incrementing Zimbra…

collaboration_suite | Remote | Authentication
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
5.3 MEDIUM
CVE-2026-93635 — Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Subst…

LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter authentication and la…

collaboration_suite | Remote | Injection
Oct 14, 2026 Oct 16, 2026
Oct 14, 2026
Oct 16, 2026
Showing 20 of 14415 Results