Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 40 of 677
- 7.5 /10 HighCVE-2026-102025 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a mismatched memory management routines vulnerability in the routing protocol daemon (rpd) process, letting authenticated network attackers cause denial of service via BGP route update with extended next-hop tunneling and SRv6 service processing.
- 7.5 /10 HighCVE-2026-102024 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an integer overflow caused by improper handling of BGP route updates in routing daemon (rpd) with extended-nexthop-tunnel enabled, letting authenticated BGP peers cause denial of service.
- 7.5 /10 HighCVE-2026-102023 No auth
Juniper Networks Junos OS Evolved - Denial of Service
Juniper Networks Junos OS Evolved contains a reachable assertion vulnerability in fwstatsd caused by SNMP firewall-counter MIB queries when firewall counters are configured, letting authenticated network attackers cause denial of service.
- 7.5 /10 HighCVE-2026-102022 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a reachable assertion vulnerability caused by crafted BGP-LS Link NLRI advertisements in the routing protocol daemon (rpd), letting attackers with BGP-LS peer access cause a crash.
- 7.5 /10 HighCVE-2026-102020 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a reachable assertion vulnerability in the rpd process caused by BGP-LS routing updates, letting authenticated network-based attackers cause denial of service.
- 7.5 /10 HighCVE-2026-102016 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an improper validation of specified quantity in the rpd process, letting configured BGP MVPN peers cause denial of service via BGP MVPN signaling updates, exploit requires configured BGP MVPN peer.
- 8.8 /10 HighCVE-2026-102015 No auth
Juniper Networks Junos OS - Remote Code Execution & Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a heap-based buffer overflow caused by improper handling of EAPOL frames in the secure-dot1xd process, letting unauthenticated adjacent network attackers execute code as root or cause denial of service, exploit requires network adjacency.
- 8.8 /10 HighCVE-2026-102014 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS contains a stack-based buffer overflow caused by improper handling of RADIUS responses in the authd process, letting attackers influencing a configured RADIUS server execute code with root privileges or cause a crash, exploit requires control over a configured RADIUS server.
- 7.5 /10 HighCVE-2026-102012 No auth
Juniper Networks Junos OS Evolved - Denial of Service
Juniper Networks Junos OS Evolved contains a reachable assertion vulnerability in the na-grpcd process, letting remote unauthenticated attackers cause denial of service via gRPC telemetry subscription requests.
- 8.1 /10 HighCVE-2026-101997 No auth
Juniper Networks Junos OS - SQL Injection
Juniper Networks Junos OS on SRX Series contains an SQL injection caused by improper neutralization of special elements in ipfd, letting unauthenticated network attackers execute code with root privileges via Security Intelligence feed connection.
- 7.1 /10 HighCVE-2026-101994 No auth
Juniper Networks Junos OS - Information Disclosure & Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an improper handling of length parameter inconsistency vulnerability in the l2ald daemon, letting attackers controlling or impersonating MC-LAG ICCP peers disclose heap memory or cause denial of service, exploit requires attacker to control or impersonate MC-LAG ICCP peer.
- 9.8 /10 CriticalCVE-2026-101990 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by processing flow-spec updates in the routing protocol daemon (rpd), letting remote configured BGP peers cause crashes or remote code execution, exploit requires a configured BGP peer.
- 9.8 /10 CriticalCVE-2026-101986 No auth
Juniper Networks Junos OS - Authentication Bypass
Juniper Networks Junos OS and Junos OS Evolved contain an improper authentication vulnerability in J-Web, caused by insufficient authentication checks, letting unauthenticated network attackers bypass authentication and execute CGI content with elevated privileges via crafted HTTP requests.
- 9.8 /10 CriticalCVE-2026-101983 No auth
Juniper Networks Junos OS - Remote Code Execution & Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow in the httpd process, letting unauthenticated network attackers cause remote code execution and denial of service, exploit requires J-Web virtual-domain configuration.
- 9.8 /10 CriticalCVE-2026-101982 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by protocol-valid route advertisements for an EVPN-VPWS service in the routing protocol daemon (rpd), letting configured BGP/EVPN peers execute root code or crash rpd, exploit requires configured BGP/EVPN peer.