High CVEs

New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.

Book a demo Request a scan

Feed at a glance

Tracked
10143
Critical
1867
CISA KEV
79
Public PoC
365

Most common types

  • Broken Access Control 1254
  • Privilege Escalation 1186
  • Remote Code Execution 1092
  • Authentication Bypass 810
  • Denial of Service 799

Published per day, last 14 days

3 Oct Critical Other 16 Oct

Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026

High CVEs

Newest first · severity as published by the vendor or NVD · page 32 of 552

  • 8.1 /10 High
    CVE-2026-102037 No auth

    Juniper Networks Junos OS - XML External Entity Injection

    Juniper Networks Junos OS on SRX Series devices contains an XML injection caused by processing malicious responses from a configured custom URL-feed server in the Unified Threat Management daemon (utmd), letting unauthenticated network attackers commit arbitrary device configuration with root privileges.

  • 7.5 /10 High
    CVE-2026-102036 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an integer overflow caused by improper handling of EVPN Type-2 MAC/IP routes in the l2ald process, letting configured EVPN BGP peers cause denial of service, exploit requires configured EVPN BGP peer.

  • 7.5 /10 High
    CVE-2026-102030 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a denial of service caused by incomplete cleanup in the rpd process when a configured MVPN neighbor sends a BGP MVPN update with inter-region segmented VRF and 'protocols mvpn inter-region-template' configured, letting configured MVPN neighbors cause service disruption, exploit requires configured MVPN neighbor.

  • 7.5 /10 High
    CVE-2026-102029 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by improper handling of MSDP or PIM policies using AS-path expansion in the routing protocol daemon (rpd), letting unauthenticated configured MSDP peers or adjacent PIM senders cause denial of service, exploit requires configured MSDP peer or adjacent PIM sender.

  • 7.5 /10 High
    CVE-2026-102028 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by handling multiple BGP UPDATEs over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured, letting remote BGP peers cause denial of service, exploit requires remote BGP peer connection.

  • 7.5 /10 High
    CVE-2026-102027 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a denial of service caused by incorrect buffer size calculation in the routing protocol daemon (rpd), letting configured eBGP neighbors crash rpd via BGP labeled-unicast UPDATEs when multipath features are enabled, exploit requires configured eBGP neighbor.

  • 7.5 /10 High
    CVE-2026-102026 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an improper control of resource through its lifetime vulnerability in the routing protocol daemon (rpd), letting adjacent eBGP peers cause routing-daemon crashes via BGP route updates when RIB sharding is enabled, exploit requires adjacent eBGP peer access.

  • 7.5 /10 High
    CVE-2026-102025 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a mismatched memory management routines vulnerability in the routing protocol daemon (rpd) process, letting authenticated network attackers cause denial of service via BGP route update with extended next-hop tunneling and SRv6 service processing.

  • 7.5 /10 High
    CVE-2026-102024 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an integer overflow caused by improper handling of BGP route updates in routing daemon (rpd) with extended-nexthop-tunnel enabled, letting authenticated BGP peers cause denial of service.

  • 7.5 /10 High
    CVE-2026-102023 No auth

    Juniper Networks Junos OS Evolved - Denial of Service

    Juniper Networks Junos OS Evolved contains a reachable assertion vulnerability in fwstatsd caused by SNMP firewall-counter MIB queries when firewall counters are configured, letting authenticated network attackers cause denial of service.

  • 7.5 /10 High
    CVE-2026-102022 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a reachable assertion vulnerability caused by crafted BGP-LS Link NLRI advertisements in the routing protocol daemon (rpd), letting attackers with BGP-LS peer access cause a crash.

  • 7.5 /10 High
    CVE-2026-102020 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a reachable assertion vulnerability in the rpd process caused by BGP-LS routing updates, letting authenticated network-based attackers cause denial of service.

  • 7.5 /10 High
    CVE-2026-102016 No auth

    Juniper Networks Junos OS - Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain an improper validation of specified quantity in the rpd process, letting configured BGP MVPN peers cause denial of service via BGP MVPN signaling updates, exploit requires configured BGP MVPN peer.

  • 8.8 /10 High
    CVE-2026-102015 No auth

    Juniper Networks Junos OS - Remote Code Execution & Denial of Service

    Juniper Networks Junos OS and Junos OS Evolved contain a heap-based buffer overflow caused by improper handling of EAPOL frames in the secure-dot1xd process, letting unauthenticated adjacent network attackers execute code as root or cause denial of service, exploit requires network adjacency.

  • 8.8 /10 High
    CVE-2026-102014 No auth

    Juniper Networks Junos OS - Buffer Overflow

    Juniper Networks Junos OS contains a stack-based buffer overflow caused by improper handling of RADIUS responses in the authd process, letting attackers influencing a configured RADIUS server execute code with root privileges or cause a crash, exploit requires control over a configured RADIUS server.