Threat Heartbeat
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
Latest CVEs
Newest first · severity as published by the vendor or NVD · page 41 of 677
- 8.8 /10 HighCVE-2026-101981 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by malformed LDP Label Mapping messages in the routing protocol daemon (rpd), letting unauthenticated adjacent LDP peers cause crashes or execute arbitrary code.
- 9.8 /10 CriticalCVE-2026-101980 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS kernel with Extended Echo configured contains an integer underflow caused by improper input handling, letting unauthenticated network attackers cause denial of service via kernel crash, exploit requires Extended Echo configuration.
- 8.8 /10 HighCVE-2026-101979 Auth required
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by improper handling of specific SNMP packets in authd, letting network attackers with SNMP read access execute code with root privileges or cause denial of service, exploit requires SNMP and AAA enabled.
- 8.8 /10 HighCVE-2026-101978 No auth
Juniper Networks Junos OS Evolved - OS Command Injection
Juniper Networks Junos OS Evolved on PTX Series contains an OS command injection caused by crafted gRPC response in bootzd zero-touch provisioning daemon, letting unauthenticated attackers on management LAN execute commands as root.
- 7.5 /10 HighCVE-2026-101977 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by processing a specific BGP packet in the routing protocol daemon (rpd), letting configured eBGP peers cause persistent denial of service, exploit requires ephemeral configuration usage.
- 7.5 /10 HighCVE-2026-101976 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an out-of-bounds write vulnerability in the routing protocol daemon (rpd) caused by malformed BGP updates from eBGP peers without four-octet-AS capability, letting attackers cause denial of service, exploit requires attacker to send malformed BGP updates.
- 7.5 /10 HighCVE-2026-101973 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS contains a null pointer dereference caused by malformed packets in the pkid component during CMP enrollment or certificate re-enrollment, letting unauthenticated remote attackers cause denial of service.
- 8.8 /10 HighCVE-2026-101967 No auth
Juniper Networks Junos OS Evolved - OS Command Injection
Juniper Networks Junos OS Evolved contains an OS command injection caused by crafted DHCP response in bootzd zero-touch provisioning daemon, letting unauthenticated attackers on management LAN execute commands as root.
- 8.2 /10 HighCVE-2026-101966 No auth
Juniper Networks Junos OS Evolved - Denial of Service
Juniper Networks Junos OS Evolved contains a use of externally-controlled format string vulnerability caused by crafted analytics sensor resource in jti-dialoutd gNMI listener, letting authenticated network attackers cause persistent telemetry dial-out denial of service.
- 8.8 /10 HighCVE-2026-101965 Auth required
Juniper Networks Junos OS Evolved - Use of Externally-Controlled Format String
Juniper Networks Junos OS Evolved contains a use of externally-controlled format string vulnerability in the gRPC daemon, letting authenticated network attackers cause telemetry-service disruption, information disclosure, or root-level code execution via crafted gNMI messages.
- 7.5 /10 HighCVE-2026-101963 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos EVO contain an incorrect calculation vulnerability in the routing protocol daemon (rpd) when SRv6 EVPN multihoming is configured, letting remote BGP EVPN neighbors cause rpd crashes, exploit requires SRv6 EVPN multihoming configuration.
- 7.5 /10 HighCVE-2026-101962 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an improper handling of length parameter inconsistency caused by malformed BGP EVPN multicast updates in routing protocol daemon (rpd), letting attackers cause a crash, exploit requires sending malformed multicast updates.
- 7.5 /10 HighCVE-2026-101961 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference vulnerability in the routing-policy nexthop-ECMP matcher, letting configured eBGP peers cause routing-daemon denial of service via specific BGP packets, exploit requires a nexthop-ecmp qualifier attached to a BGP import policy.
- 7.5 /10 HighCVE-2026-101957 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an improper initialization vulnerability in the routing protocol daemon (rpd) caused by LLGR-stale route updates readvertised to non-LLGR peer groups, letting remote BGP peers cause rpd crashes, exploit requires remote BGP peer access.
- 9.8 /10 CriticalCVE-2026-101956 No auth
Juniper Networks Junos OS - Authentication Bypass
Juniper Networks Junos OS contains an improper authentication vulnerability in the J-Web web management component, letting unauthenticated remote attackers execute arbitrary Junos commands with root privileges via the exposed web interface.