CVSS: v3.1: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)CVSS: v4.0: 9.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L/V:C/RE:M/U:Red)
Multiple vulnerabilities have been resolved in the Juniper Networks Junos OS on MX Series. These issues were found during extensive internal product security testing.
These issues affect:Junos OS:
Note: For Junos OS releases 23.2, 23.4, and 24.2, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.
Important security issues resolved include:
Juniper SIRT is not aware of any malicious exploitation of these vulnerabilities.
These issues were found during internal product security testing or research.
The following software releases have been updated to resolve this specific issue:Junos OS: 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases.Note: For Junos OS releases 23.2, 23.4, and 24.2, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.
These issues are being tracked as 1955220, 1957225 and 1952216 which are visible on the Customer Support website.
Note: Juniper SIRT's policy is not to evaluate releases which are beyond End of Engineering (EOE) or End of Life (EOL).
There are no known workarounds for all of these issues.Refer to the specific CVE records for additional details on potential individual workarounds.
2026-10-14: Initial Publication