Skip to main content
A Singapore Government Agency Website How to identify
Official website links end with .gov.sg
Secure websites use HTTPS
Look for a lock () or https:// as an added precaution. Share sensitive information only on official, secure websites.
Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Alerts

Critical Vulnerabilities in Juniper Devices

19 October 2026

Attackers can exploit critical vulnerabilities in Juniper devices to execute arbitrary code, cause a denial-of-service condition, or gain root-level privileges. Patch immediately.

Background

Juniper Networks has released security updates addressing multiple critical vulnerabilities (CVE-2026-102178, CVE-2026-102175, CVE-2026-101990, CVE-2026-101986, CVE-2026-101983, CVE-2026-101982, CVE-2026-101954, CVE-2026-33796, CVE-2026-33789) in Junos OS and Junos OS Evolved.

These vulnerabilities have Common Vulnerability Scoring System (CVSS v3.1) scores of 9.8 out of 10.

Impact

Successful exploitation of these vulnerabilities could result in the following:

  • CVE-2026-102178: A Stack-based Buffer Overflow vulnerability in the Border Gateway Protocol (BGP) routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled.

  • CVE-2026-102175: A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a crafted frame received over the service-deployment TCP connection.

  • CVE-2026-101990: A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.

  • CVE-2026-101986: An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request.

  • CVE-2026-101983: A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service.

  • CVE-2026-101982: A Stack-based Buffer Overflow vulnerability in the rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.

  • CVE-2026-101954: An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.

  • CVE-2026-33796: A Stack-based Buffer Overflow vulnerability in the rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbour to execute arbitrary commands with root privileges via BGP Monitoring Protocol (BMP) route monitoring.

  • CVE-2026-33789: A Stack-based Buffer Overflow vulnerability in the rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BMP is enabled.

Affected Products

These vulnerabilities affect the following Junos OS and Junos OS Evolved versions:

Junos OS:

  • All versions prior to 23.2R2-S7.7

  • 23.4: Versions prior to 23.4R2-S8.13

  • 24.2: Versions prior to 24.2R2-S5.5

  • 24.4: Versions prior to 24.4R2-S5

  • 25.2: Versions prior to 25.2R2-S2

  • 25.4: Versions prior to 25.4R1-S3

  • 26.2: Versions prior to 26.2R1-S2

Junos OS Evolved:

  • All versions prior to 23.2R2-S7.7-EVO

  • 23.4: Versions prior to 23.4R2-S8.11-EVO

  • 24.2: Versions prior to 24.2R2-S5.6-EVO

  • 24.4: Versions prior to 24.4R2-S5-EVO

  • 25.2: Versions prior to 25.2R2-S2-EVO

  • 25.4: Versions prior to 25.4R1-S3-EVO

  • 26.2: Versions prior to 26.2R1-S2-EVO

  • 23.4X100-EVO

  • 25.2X100: Versions prior to 25.2X100-D35-EVO

  • 25.4X300: Versions prior to 25.4X300-D40-EVO

Recommendations

Users and administrators of affected products are advised to update to the latest versions immediately.

References

https://supportportal.juniper.net/s/article/2026-10-Security-Bulletin-Junos-OS-and-Junos-OS-Evolved-Multiple-vulnerabilities-resolved (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-102178 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-102175 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-101990 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-101986 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-101983 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-101982 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-101954 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-33796 (opens in new tab)

https://nvd.nist.gov/vuln/detail/cve-2026-33789 (opens in new tab)