Multiple vulnerabilities in Juniper Networks products (July 09, 2026)
Multiple vulnerabilities have been discovered in Juniper Networks products. Some of them allow an attacker to cause arbitrary code execution, a remote denial of service, and a breach of data confidentiality.
CSIRTS triage
- What
- Multiple vulnerabilities allow an attacker to cause arbitrary code execution, a remote denial of service, and a breach of data confidentiality.
- Who is affected
- Deployments of Juniper Networks products are affected by these vulnerabilities.
- Urgency
- Remediation is urgent due to the severity of arbitrary code execution and denial of service risks.
- Action
- Apply the latest patches for Juniper Networks products to remediate these vulnerabilities.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Juniper Networks products
Get an email when a new Juniper Networks products advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0852/
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-570220.40% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 33% of all scored CVEs.
- Low exploitation riskCVE-2026-570280.30% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 22% of all scored CVEs.
- Moderate exploitation riskCVE-2020-74502.5% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 83% of all scored CVEs.
- Low exploitation riskCVE-2026-338010.28% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 20% of all scored CVEs.
- Low exploitation riskCVE-2026-570290.19% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 9% of all scored CVEs.
- Low exploitation riskCVE-2026-570230.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all scored CVEs.
- Low exploitation riskCVE-2026-570260.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all scored CVEs.
- Low exploitation riskCVE-2026-570190.27% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 19% of all scored CVEs.
- Low exploitation riskCVE-2026-219010.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 6% of all scored CVEs.
- Low exploitation riskCVE-2026-337990.36% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 28% of all scored CVEs.
Referenced CVEs
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- high[NEW] [high] Juniper JUNOS and JUNOS Evolved: Multiple vulnerabilitiescert-bund
- mediumCVE-2026-57054: A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of J…nvd
- mediumCVE-2026-57032: An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pf…nvd
- mediumCVE-2026-57031: An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding…nvd
- mediumCVE-2026-57030: A Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') …nvd
- mediumCVE-2026-57029: A Missing Synchronization vulnerability in the flow collector handler of Juniper Networks Juno…nvd
- highCVE-2026-57028: An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Junipe…nvd
- mediumCVE-2026-57027: A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding en…nvd
- highCVE-2026-57026: An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Ju…nvd
- mediumCVE-2026-57025: A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Jun…nvd
- mediumCVE-2026-57024: A Use of Multiple Resources with Duplicate Identifier vulnerability in the IKE daemon (iked) o…nvd
- highCVE-2026-57023: An Improper Validation of Specified Quantity in Input vulnerability in the TCP proxy plugin of…nvd
More from CERT-FR Avis de sécurité
- unknownMultiple vulnerabilities in Red Hat Linux kernel (July 10, 2026)2026-07-10
- unknownMultiple vulnerabilities in Ubuntu Linux kernel (July 10, 2026)2026-07-10
- unknownMultiple vulnerabilities in Progress MOVEit Transfer (July 10, 2026)2026-07-10
- unknownVulnerability in NetApp ONTAP 9 (July 10, 2026)2026-07-10
- unknownVulnerability in CPython (July 10, 2026)2026-07-10