Threat Heartbeat

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

Latest CVEs

Newest first · severity as published by the vendor or NVD · page 38 of 677

  • 9.8 /10 Critical
    CVE-2026-102175 No auth

    Juniper Networks Junos OS - Remote Code Execution & Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a heap-based buffer overflow caused by improper handling of frames in the sdxd service-deployment daemon, letting remote unauthenticated attackers execute code as root or cause denial of service via crafted TCP frames, exploit requires control or interception of the SDX/SRC server connection.

  • 8.8 /10 High
    CVE-2026-102174 Auth required

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS on SRX Series contains a stack-based buffer overflow caused by improper handling in the iked IKE key-management daemon, letting authenticated remote-access VPN clients execute code with root privileges or cause denial of service, exploit requires authenticated remote-access VPN client.

  • 8.1 /10 High
    CVE-2026-102084 No auth

    Juniper Networks Junos OS - Remote Code Execution

    Juniper Networks Junos OS on SRX Series < 23.2R2-S7.7, 23.4 < 23.4R2-S7, 24.2 < 24.2R2-S4, 24.4 < 24.4R2-S3, 25.2 < 25.2R2, and 25.4 < 25.4R1-S3 contain a buffer overflow caused by improper validation of malformed attributes in AutoDiscovery VPN messages, letting authenticated network attackers execute remote code, exploit requires shared secret or compromised peer.

  • 7.5 /10 High
    CVE-2026-102081 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS on SRX and MX Series 23.4R2-S3 < versions < 23.4R2-S7, 24.2R2 < versions < 24.2R2-S3, 24.4 < versions < 24.4R2-S3, and 25.2 < versions < 25.2R2 contain a denial of service caused by memory leak in the packet forwarding engine when specific application services are configured, letting unauthenticated network attackers exhaust memory and disrupt traffic processing, exploit requires high connection churn.

  • 7.8 /10 High
    CVE-2026-102079 Auth required

    Juniper Networks Junos OS - Command Injection

    Juniper Networks Junos OS < 24.4R2-S4, < 25.2R2-S1, < 25.4R1-S3 contains a command injection caused by unsanitized input in the 'request csds' CLI command, letting local low privileged attackers execute commands as root, exploit requires local access.

  • 7.5 /10 High
    CVE-2026-102077 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS on MX Series with SPC3 contains a denial-of-service vulnerability caused by improper handling of malformed IPv6 packets in the Packet Forwarding Engine, letting unauthenticated network attackers exhaust NAT resources, exploit requires source NAT configuration.

  • 7.5 /10 High
    CVE-2026-102070 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS contains a reachable assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client, letting unauthenticated network attackers cause rmopd service disruption via a specific TCP packet, exploit requires network access.

  • 8.8 /10 High
    CVE-2026-102069 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS on Junos Fusion Aggregation Devices contains a stack-based buffer overflow caused by dot1x daemon synchronization handling, letting adjacent ICCP peer attackers cause denial of service or execute code as root, exploit requires dot1x synchronization enabled in Fusion satellite topology.

  • 7.5 /10 High
    CVE-2026-102068 No auth

    Juniper Networks Junos OS Evolved - Buffer Overflow

    Juniper Networks Junos OS Evolved contains a stack-based buffer overflow caused by crafted TCP packets when key-chain authentication is used for BGP or LDP, letting unauthenticated remote attackers trigger a kernel panic.

  • 7.5 /10 High
    CVE-2026-102065 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an improper validation of specified quantity in routing protocol daemon (rpd) caused by malformed BGP-signaled SRv6 service route with SRv6 dynamic tunnels enabled, letting remote unauthenticated BGP peers cause rpd crash.

  • 7.5 /10 High
    CVE-2026-102064 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a reachable assertion vulnerability caused by malformed BGP MCAST-VPN updates in the routing protocol daemon (rpd), letting attackers cause rpd crash via configured eBGP peer.

  • 8.1 /10 High
    CVE-2026-102062 No auth

    Juniper Networks Junos OS - Remote Code Execution & Privilege Escalation

    Juniper Networks Junos OS on SRX Series contains a use of externally-controlled format string vulnerability in the ipfd daemon, letting unauthenticated network attackers execute code with root privileges via a compromised HTTPS feed server.

  • 8.8 /10 High
    CVE-2026-102061 No auth

    Juniper Networks Junos OS - Remote Code Execution

    Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by improper handling of crafted DHCP SZTP bootstrap messages in the phone-home daemon (phcd), letting adjacent unauthenticated attackers execute arbitrary code as root, exploit requires adjacent network access on platforms supporting Secure-ZTP.

  • 8.8 /10 High
    CVE-2026-102059 No auth

    Juniper Networks Junos OS - OS Command Injection

    Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series contain an OS command injection caused by improper neutralization of special elements in the phone-home daemon (phcd), letting adjacent unauthenticated attackers execute arbitrary commands with root privileges via a rogue DHCP server.

  • 7.5 /10 High
    CVE-2026-102057 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS contains a stack-based buffer overflow caused by improper handling of DHCP client responses in jdhcpd process, letting unauthenticated adjacent attackers cause denial of service, exploit requires network adjacency.