Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
9.8 CRITICAL
CVE-2026-33789 — Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a spec…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and …

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.1 HIGH
CVE-2026-19673 — Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a trun…

ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr. When the ethertype is 0x8100 and VLAN is enabl…

zephyr zephyr | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.5 HIGH
CVE-2026-15102 — Cleartext Transmission of Sensitive Information in ADP Desktop SDK

ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk services.

| Cryptography
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-109439 — Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718

Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device conf…

Remote | Authentication
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-105659 — HTTP/2 blocked-send deadlines reset on every WINDOW_UPDATE, letting a trickle pin stream …

Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely via a trickle of small WINDOW_UPDATE frames. A …

bandit | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.3 MEDIUM
CVE-2026-105236 — TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust bound…

Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a second SNI virtual hos…

erlang\/otp otp | Remote | Authentication
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-103994 — Junos OS: A crafted OVSDB message crashes vgd and allows remote code execution

A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB cont…

| Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
6.9 MEDIUM
CVE-2026-103993 — Junos OS and Junos OS Evolved: If a specific set of BGP communities is present and gracef…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set of BGP communities t…

| Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-103946 — SQL Injection

An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus.

nessus | Remote | Injection
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102185 — Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN mult…

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102184 — Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling pe…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102183 — Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd…

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause a…

junos junos_os_evolved | Remote | Denial of Service
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-102182 — Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution

A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via specific IKE certific…

junos | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102180 — Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming tel…

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session t…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.7 HIGH
CVE-2026-102179 — Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RI…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a den…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-102178 — Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malfor…

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a r…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
7.6 HIGH
CVE-2026-102177 — Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS back…

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service wh…

junos junos_os_evolved | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-102176 — Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the …

A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a de…

junos | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
9.8 CRITICAL
CVE-2026-102175 — Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of serv…

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercep…

junos junos_os_evolved | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
8.8 HIGH
CVE-2026-102174 — Junos OS: SRX Series: An authenticated remote-access VPN client causes iked denial of ser…

A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with …

junos | Remote | Memory Corruption
Oct 14, 2026 Oct 14, 2026
Oct 14, 2026
Oct 14, 2026
Showing 20 of 16687 Results