Security1 hOctober 26, 2026, 13:42

Nine Junos flaws at CVSS 9.8 stay out of CISA KEV catalog

Nine Junos OS and Junos OS Evolved vulnerabilities rated CVSS v3.1 9.8 were published on October 14, 2026, yet none appears in CISA's KEV catalog version 2026.10.23. Most yield root on the routing engine, and several are reachable pre-authentication via J-Web, NETCONF or BGP peering.

DEV Community

Open source

Nine Junos flaws at CVSS 9.8 stay out of CISA KEV catalog

Nine Junos flaws rated CVSS v3.1 9.8 and v4.0 9.2–9.3
Three J-Web and httpd bugs need only reachable HTTP/HTTPS
CVE-2026-33789 reachable by an unauthenticated BGP peer
ZoomEye counts 343,949 Juniper assets on the public internet

#Juniper#Junos#CISA

Two Junos flaws with CVSS 9.8 reach root via BGP Monitoring Protocol

Security

Junos OS SRX XML injection flaw rated CVSS 9.2

Security

CISA adds two actively exploited critical flaws to KEV catalog

Security

Nine Junos flaws at CVSS 9.8 stay out of CISA KEV catalog

Two Junos flaws with CVSS 9.8 reach root via BGP Monitoring Protocol

Junos OS SRX XML injection flaw rated CVSS 9.2

CISA adds two actively exploited critical flaws to KEV catalog

CISA adds five legacy flaws to KEV catalog with 11 October deadline