High CVEs
New CVEs as they are published, with CVSS score, CISA KEV status, public exploits and the vendor's fix. Worth tracking, but only a small part of what Panop does: mapping what you expose to the internet, testing what an attacker can actually exploit, ranking it by business impact, and helping your team understand and fix it.
Feed at a glance
- Tracked
- 10143
- Critical
- 1867
- CISA KEV
- 79
- Public PoC
- 365
Most common types
- Broken Access Control 1254
- Privilege Escalation 1186
- Remote Code Execution 1092
- Authentication Bypass 810
- Denial of Service 799
Published per day, last 14 days
Source: public CVE records (NVD, CISA KEV) · last published 16 Oct 2026
High CVEs
Newest first · severity as published by the vendor or NVD · page 33 of 552
- 7.5 /10 HighCVE-2026-102012 No auth
Juniper Networks Junos OS Evolved - Denial of Service
Juniper Networks Junos OS Evolved contains a reachable assertion vulnerability in the na-grpcd process, letting remote unauthenticated attackers cause denial of service via gRPC telemetry subscription requests.
- 8.1 /10 HighCVE-2026-101997 No auth
Juniper Networks Junos OS - SQL Injection
Juniper Networks Junos OS on SRX Series contains an SQL injection caused by improper neutralization of special elements in ipfd, letting unauthenticated network attackers execute code with root privileges via Security Intelligence feed connection.
- 7.1 /10 HighCVE-2026-101994 No auth
Juniper Networks Junos OS - Information Disclosure & Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an improper handling of length parameter inconsistency vulnerability in the l2ald daemon, letting attackers controlling or impersonating MC-LAG ICCP peers disclose heap memory or cause denial of service, exploit requires attacker to control or impersonate MC-LAG ICCP peer.
- 8.8 /10 HighCVE-2026-101981 No auth
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by malformed LDP Label Mapping messages in the routing protocol daemon (rpd), letting unauthenticated adjacent LDP peers cause crashes or execute arbitrary code.
- 8.8 /10 HighCVE-2026-101979 Auth required
Juniper Networks Junos OS - Buffer Overflow
Juniper Networks Junos OS and Junos OS Evolved contain a stack-based buffer overflow caused by improper handling of specific SNMP packets in authd, letting network attackers with SNMP read access execute code with root privileges or cause denial of service, exploit requires SNMP and AAA enabled.
- 8.8 /10 HighCVE-2026-101978 No auth
Juniper Networks Junos OS Evolved - OS Command Injection
Juniper Networks Junos OS Evolved on PTX Series contains an OS command injection caused by crafted gRPC response in bootzd zero-touch provisioning daemon, letting unauthenticated attackers on management LAN execute commands as root.
- 7.5 /10 HighCVE-2026-101977 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference caused by processing a specific BGP packet in the routing protocol daemon (rpd), letting configured eBGP peers cause persistent denial of service, exploit requires ephemeral configuration usage.
- 7.5 /10 HighCVE-2026-101976 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an out-of-bounds write vulnerability in the routing protocol daemon (rpd) caused by malformed BGP updates from eBGP peers without four-octet-AS capability, letting attackers cause denial of service, exploit requires attacker to send malformed BGP updates.
- 7.5 /10 HighCVE-2026-101973 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS contains a null pointer dereference caused by malformed packets in the pkid component during CMP enrollment or certificate re-enrollment, letting unauthenticated remote attackers cause denial of service.
- 8.8 /10 HighCVE-2026-101967 No auth
Juniper Networks Junos OS Evolved - OS Command Injection
Juniper Networks Junos OS Evolved contains an OS command injection caused by crafted DHCP response in bootzd zero-touch provisioning daemon, letting unauthenticated attackers on management LAN execute commands as root.
- 8.2 /10 HighCVE-2026-101966 No auth
Juniper Networks Junos OS Evolved - Denial of Service
Juniper Networks Junos OS Evolved contains a use of externally-controlled format string vulnerability caused by crafted analytics sensor resource in jti-dialoutd gNMI listener, letting authenticated network attackers cause persistent telemetry dial-out denial of service.
- 8.8 /10 HighCVE-2026-101965 Auth required
Juniper Networks Junos OS Evolved - Use of Externally-Controlled Format String
Juniper Networks Junos OS Evolved contains a use of externally-controlled format string vulnerability in the gRPC daemon, letting authenticated network attackers cause telemetry-service disruption, information disclosure, or root-level code execution via crafted gNMI messages.
- 7.5 /10 HighCVE-2026-101963 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos EVO contain an incorrect calculation vulnerability in the routing protocol daemon (rpd) when SRv6 EVPN multihoming is configured, letting remote BGP EVPN neighbors cause rpd crashes, exploit requires SRv6 EVPN multihoming configuration.
- 7.5 /10 HighCVE-2026-101962 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain an improper handling of length parameter inconsistency caused by malformed BGP EVPN multicast updates in routing protocol daemon (rpd), letting attackers cause a crash, exploit requires sending malformed multicast updates.
- 7.5 /10 HighCVE-2026-101961 No auth
Juniper Networks Junos OS - Denial of Service
Juniper Networks Junos OS and Junos OS Evolved contain a null pointer dereference vulnerability in the routing-policy nexthop-ECMP matcher, letting configured eBGP peers cause routing-daemon denial of service via specific BGP packets, exploit requires a nexthop-ecmp qualifier attached to a BGP import policy.