Juniper Junos OS Multiple Vulnerabilities
CSIRTS triage
- What
- Multiple vulnerabilities exist in Junos OS.
- Who is affected
- Deployments of Junos OS are affected.
- Urgency
- Remediation is necessary due to the potential for exploitation, though the severity is currently unknown.
- Action
- Consult Juniper's security advisories for patches or mitigations.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Junos OS
Get an email when a new Junos OS advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.hkcert.org/security-bulletin/juniper-junos-os-multiple-vulnerabilities_20260709
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2020-74502.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 83% of all scored CVEs.
- Low exploitation riskCVE-2026-219010.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
- Low exploitation riskCVE-2026-337940.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
- Low exploitation riskCVE-2026-337990.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all scored CVEs.
- Low exploitation riskCVE-2026-338000.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
- Low exploitation riskCVE-2026-338010.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all scored CVEs.
- Low exploitation riskCVE-2026-338020.12% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.
- Low exploitation riskCVE-2026-338030.35% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 27% of all scored CVEs.
- Low exploitation riskCVE-2026-570190.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
- Low exploitation riskCVE-2026-570200.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Juniper JUNOS and JUNOS Evolved: Multiple vulnerabilitiescert-bund
- mediumCVE-2026-57054: A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of J…nvd
- mediumCVE-2026-57032: An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pf…nvd
- mediumCVE-2026-57031: An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding…nvd
- mediumCVE-2026-57030: A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') …nvd
- mediumCVE-2026-57029: A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Juno…nvd
- highCVE-2026-57028: An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Junipe…nvd
- mediumCVE-2026-57027: A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding en…nvd
- highCVE-2026-57026: An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Ju…nvd
- mediumCVE-2026-57025: A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Jun…nvd
- mediumCVE-2026-57024: A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) o…nvd
- highCVE-2026-57023: An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of…nvd
Recent advisories for Juniper Junos OS
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-57054: A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of J…nvd · 2026-07-09
- mediumCVE-2026-57032: An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pf…nvd · 2026-07-09
- mediumCVE-2026-57031: An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding…nvd · 2026-07-09
- mediumCVE-2026-57030: A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') …nvd · 2026-07-09
- mediumCVE-2026-57029: A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Juno…nvd · 2026-07-09
- highCVE-2026-57028: An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Junipe…nvd · 2026-07-09
More from HKCERT Security Bulletins
- unknownPalo Alto Products Multiple Vulnerabilities2026-07-09
- unknownGoogle Chrome Multiple Vulnerabilities2026-07-09
- unknownBeyondTrust Products Multiple Vulnerabilities2026-07-08
- unknownApple Products Multiple Vulnerabilities2026-07-06
- unknownDebian Linux Kernel Multiple Vulnerabilities2026-07-06