Juniper Networks security advisory (AV26-675)

unknownCVE-2020-7450 CVE-2026-33799

Serial number: AV26-675 Date: July 8, 2026 On July 8, 2026, Juniper Networks published security advisories to address vulnerabilities in the following products: Juniper cRPD – all versions Juniper CTPView – all versions Juniper Network Director – versions prior to 7.1R3 Junos OS – multiple versions Junos OS Evolved – all versions Junos OS on MX Series with SPC3 and SRX Series – multiple versions Junos Space – all versions The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates. 2026-07 Security Bulletin: CTPView: Multiple vulnerabilities resolved in 9.3R2-3 Release 2026-07 Security Bulletin: Junos Space: Multiple vulnerabilities resolved in 26.1R1 Patch V1 Release 2026-07 Security Bulletin: Junos OS Evolved: URL handling vulnerability in libfetch results in heap buffer overflow (CVE-2020-7450) 2026-07 Security Bulletin: Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash (CVE-2026-33799) Juniper Support Portal

CSIRTS triage

vendor: Juniper Networks product: Juniper cRPDaffected: all versions

What: Multiple vulnerabilities have been identified in various Juniper products.
Who is affected: All deployments of Juniper cRPD and other specified products are affected.
Urgency: Remediation is necessary as vulnerabilities exist, but exploitation status is not confirmed.
Action: Users should review the advisories and apply necessary updates.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Juniper cRPD

Get an email when a new Juniper cRPD advisory drops — max one per day, one-click unsubscribe.

Details

Source: Canadian Centre for Cyber Security (CA · national-cert · site)
Severity: unknown
Published: 2026-07-08
Exploitation: Not in CISA KEV at last sync

Original advisory: https://cyber.gc.ca/en/alerts-advisories/juniper-networks-security-advisory-av26-675

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Moderate exploitation riskCVE-2020-74502.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 83% of all scored CVEs.
Low exploitation riskCVE-2026-337990.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2020-7450	coverage & exploitation status	NVD · CVE.org
CVE-2026-33799	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

high[NEW] [high] Juniper JUNOS and JUNOS Evolved: Multiple vulnerabilitiescert-bund
mediumCVE-2026-33799: An Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS a…nvd
unknownJuniper Junos OS Multiple Vulnerabilitieshkcert
unknownMultiple vulnerabilities in Juniper Networks products (July 09, 2026)cert-fr-avis