Article Detail

Alert Type

SRN - Software Release Notification

RiskRisk Description

Low/Notification

Software Release Notification

ImpactImpact Description

Low/Notification

Software Release Notification

Product Affected

ACX EX MX NFX PTX QFX SRX vSRX

Alert Description

Junos Software Service Release version 22.2R3-S8 is now available for download from the Junos software download site

Download Junos Software Service Release:

Go to Junos Platforms - Download Software page
Input your product in the "Find a Product" search box
From the Type/OS drop-down menu, select Junos SR
From the Version drop-down menu, select your version
Click the Software tab
Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

For your review

Solution

Junos Software service Release version 22.2R3-S8 is now available.

22.2R3-S8 - List of Fixed issues

PR Number	Synopsis	Category: MX Services URL filter
1926259 Major	Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs (CVE-2026-57054) Product-Group=junos Severity=Major	A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows a unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable. Please refer to https://supportportal.juniper.net/JSA110093 [juniper.net] for more information.
PR Number	Synopsis	Category: SPC3 HW and SW Issues
1922949 Critical	Executing unsupported pfe cli triggers chassis reset on srx5000 series Product-Group=junos Severity=Critical	On Junos SRX5000 series platforms with Services Processing Card 3 (SPC3), executing the unsupported operational command "show pfe statistics dma" causes loss of communication between the Packet Forwarding Engine (PFE) and the Routing Engine (RE), triggering a system-wide Flexible PIC Concentrator reset and resulting in a complete traffic outage.
PR Number	Synopsis	Category: "agentd" software daemon
1791928 Critical	Junos OS and Junos OS Evolved: When telemetry collectors are frequently subscribing and unsubscribing to sensors chassisd or rpd will crash (CVE-2026-21921) Product-Group=junos Severity=Critical	A Use After Free vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-based attacker authenticated with low privileges to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA106021 [juniper.net] for more information.
PR Number	Synopsis	Category: Border Gateway Protocol
1861799 Major	The "advertise-inactive" configuration does not work as expected when "add-path multipath" is configured and negotiated with the neighbor Product-Group=junos Severity=Major	On all Junos and Junos Evolved platforms with "advertise-inactive" configured under Border Gateway Protocol (BGP), inactive routes are not advertised to peers when "add-path multipath" is configured and negotiated with the neighbor.
1877111 Major	The Aggregate-Bandwidth feature inconsistency on BGP Route Reflectors with VRF L3VPN Multipath Product-Group=junos Severity=Major	On all Junos and Junos Evolved platforms, the aggregate-bandwidth feature does not function as expected with the device configured as a BGP (Border Gateway Protocol) Route Reflector (RR). This issue is observed specifically in scenarios involving BGP multipath bandwidth aggregation for routes originating from VRF (Virtual Routing and Forwarding) instances under the L3VPN (Layer 3 Virtual Private Network) address family.
1877332 Minor	EBGP MULTIPATH is not set on ACTIVE route Product-Group=junos Severity=Minor	On all Junos/EVO platforms, in BGP multipath scenario, it is observed that due to a software issue, the Active route does not have all the ECMP legs. Hence only one leg is installed to forwarding.
1878812 Minor	Junos OS and Junos OS Evolved: BGP update with a set of specific attributes causes rpd crash (CVE-2025-60003) Product-Group=junos Severity=Minor	A Buffer Over-read vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA103166 [juniper.net] for more information.
1883803 Major	Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash (CVE-2025-59959) Product-Group=junos Severity=Major	An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA103148 [juniper.net] for more information.
1884492 Major	Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap (CVE-2025-60011) Product-Group=junos Severity=Major	An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an availability impact for downstream devices. Please refer to https://supportportal.juniper.net/JSA103161 [juniper.net] for more information.
1935730 Major	BGP session teardown due to incorrect 'prefix-limit maximum exceeded' error when RIB sharding is enabled Product-Group=junos Severity=Major	On all Junos and Junos OS Evolved platforms, when prefix-limit or accepted-prefix-limit is configured under family route-target with rib-sharding, prefix-limit will be incorrectly reported as 'prefix-limit maximum is exceeded'. This causes the BGP session to go down immediately. This occurs because the system incorrectly counts each received route multiple times (once for the main thread and once for each shard)
PR Number	Synopsis	Category: Track PRs in BGP Flow Spec area & is part of BGP inside RPD.
1945627 Minor	BGP IPv6 Flow Specification Session Flapping When inet6-flow Is Enabled Product-Group=junos Severity=Minor	In certain Junos OS releases, BGP sessions may repeatedly reset when IPv6 Flow Specification (inet6-flow) is enabled. This behavior occurs when the router receives specific IPv6 Flow Specification updates that include a default (wildcard) match. Earlier releases do not exhibit this behavior, leading to a difference in observed stability when upgrading.
PR Number	Synopsis	Category: MX304 fabric issues (ULC side)
1905954 Critical	memory leak caused by using the "show ccl statistic summary ... " command Product-Group=junos Severity=Critical	On Junos OS and Junos OS Evolved platforms, running the command "show ccl statistic summary ... " cause memory leaks in the Packet Forwarding Engine (PFE).
PR Number	Synopsis	Category: MX304 Routing Engine issues
1927165 Major	Intermittent delays caused during commit or commit check on Junos VMHost platforms Product-Group=junosvae Severity=Major	On all Junos VMHost platforms, stale SSH login sessions can cause commit and commit-check operations to intermittently stall at the DCD(Collecting status of the Interface Control process) stage.
PR Number	Synopsis	Category: MX Platform SW - Environment Monitoring
1854693 Minor	Junos OS: A specifically crafted 'show chassis' command causes chassisd to crash (CVE-2025-60007) Product-Group=junos Severity=Minor	A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA103173 [juniper.net] for more information.
PR Number	Synopsis	Category: EVO L2 Control Plane PRs
1852019 Major	The l2ald process crash is observed when same Type 5 MAC-IP received with same IP and different MAC Product-Group=junos Severity=Major	On all Junos and Junos Evolved platforms, the L2ALD (Layer 2 Address Learning Daemon) process crash is observed in rare cases, when in EVPN (Ethernet Virtual Private Network) VXLAN (Virtual eXtensible Local-Area Network) scenario, Type 5 MAC-IP (Media Access Control Address - Internet Protocol) entry is freed after another MAC-IP request is received with same IP and different MAC. There is no traffic impact observed.
PR Number	Synopsis	Category: EVPN Layer-2 Forwarding
1943641 Major	ARP and MAC/IP table for virtual IP mac is not installed in bridge domain which is part if EVPN instance Product-Group=junos Severity=Major	In all Junos and Junos OS Evolved platforms supporting EVPN-MPLS, EVPN-VXLAN when VRRP device is connected to EVPN PE with Aggregate Ethernet interface the VRRP virtual IP may fail to install ARP and destination route entries when the VRRP virtual MAC is learned on one FPC while the ARP response is received on another FPC with a source MAC mismatch.
PR Number	Synopsis	Category: EX4400 platform
1942085 Major	EX4400: Kernel panic and unexpected reboot on certain EX4400 platforms due to CPU erratum Product-Group=junos Severity=Major	On EX4400 product family platforms, device experienced an unexpected reboot and recovers automatically. The system logs indicate a kernel panic, and a VMcore file is generated. Traffic impact will be seen until the recovery. Bios version CDEN_P_EX1_00.22.01.00 fixes this issue.
PR Number	Synopsis	Category: PFE EVPN / VxLAN related issues on EX platforms
1847849 Critical	Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop (CVE-2026-21910) Product-Group=junos Severity=Critical	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms allows an unauthenticated network-adjacent attacker flapping an interface to cause traffic between VXLAN Network Identifiers (VNIs) to drop, leading to a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA106009 [juniper.net] for more information.
PR Number	Synopsis	Category: Express PFE including evpn, vxlan
1927521 Major	Unexpected FPC reboot in QFX device after inserting and removing a transceiver Product-Group=junos Severity=Major	On Junos QFX10002-60C/QFX10008/QFX10016 an unexpected FPC reboot with dcpfe core dump is experienced due to a transceiver plug-in plug-out in an Aggregated Ethernet (AE) interface member affecting all traffic on that line card. No manual intervention is required, fpc will automatically reboot and recover
PR Number	Synopsis	Category: Express PFE L2 fwding Features
1916949 Major	Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood (CVE-2026-57020) Product-Group=junos Severity=Major	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110080 [juniper.net] for more information.
PR Number	Synopsis	Category: jdhcpd daemon
1777055 Major	Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts (CVE-2026-33782) Product-Group=junos Severity=Major	A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attacker to cause a memory leak, that will eventually cause a complete Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA107820 [juniper.net] for more information.
1877468 Critical	Junos OS and Junos OS Evolved: Unix socket used to control the jdhcpd process is world-writable (CVE-2025-59961) Product-Group=junos Severity=Critical	An Incorrect Permission Assignment for Critical Resource vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged user to write to the Unix socket used to manage the jdhcpd process, resulting in complete control over the resource. Please refer to https://supportportal.juniper.net/JSA103150 [juniper.net] for more information.
PR Number	Synopsis	Category: Adresses ALG issues found in JSF
1876029 Major	Junos OS: SRX Series, MX Series with MX-SPC3 or MS-MPC: Receipt of multiple specific SIP messages results in flow management process crash (CVE-2026-21905) Product-Group=junos Severity=Major	A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series and MX Series with MX-SPC3 or MS-MPC allows an unauthenticated network-based attacker sending specific SIP messages over TCP to crash the flow management process, leading to a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA106004 [juniper.net] for more information.
1930403 Major	SIP calls may not function properly in the SIP ALG application on MX-SPC3 and SRX platforms Product-Group=junos Severity=Major	On MX platforms with SPC3 line-cards/ SRX platforms, when there are bandwidth attributes carried in SDP(Session Description Protocol) messages inside SIP(Session Initiation Protocol) packets, SIP application traffic and SIP calls get impacted.
1932051 Critical	Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash (CVE-2026-57026) Product-Group=junos Severity=Critical	An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110086 [juniper.net] for more information.
PR Number	Synopsis	Category: Flow Module
1868005 Major	Junos OS: SRX Series: With GRE performance acceleration enabled, receipt of a specific ICMP packet causes the PFE to crash (CVE-2026-21906) Product-Group=junos Severity=Major	An Improper Handling of Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker sending a specific ICMP packet through a GRE tunnel to cause the PFE to crash and restart. Please refer to https://supportportal.juniper.net/JSA106005 [juniper.net] for more information.
PR Number	Synopsis	Category: Firewall Network Address Translation
1897060 Major	Junos OS: SRX Series : In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart. (CVE-2026-33790) Product-Group=junos Severity=Major	An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart. Continued receipt and processing of these packets will repeatedly crash the srxpfe process and sustain the Denial of Service (DoS) condition.Please refer to https://supportportal.juniper.net/JSA107874 [juniper.net] for more information.
1933239 Critical	The FPC restarts on SRX series platforms when session-persistence-scan is configured Product-Group=junos Severity=Critical	On Junos OS SRX Series platforms with 'session-persistence-scan' and NAT46 or NAT64 configured, modification to source Network Address Translation (NAT) rule will cause Flexible PIC Concentrators (FPCs) to restart when there is live IPv6 traffic. This will cause all traffic to be dropped and cause service disruption.
PR Number	Synopsis	Category: Security platform jweb support
1877553 Major	Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication (CVE-2026-33779) Product-Group=junos Severity=Major	An Improper Following of a Certificate's Chain of Trust vulnerability in J-Web of Juniper Networks Junos OS on SRX Series allows a PITM to intercept the communication of the device and get access to confidential information and potentially modify it. Please refer to https://supportportal.juniper.net/JSA107823 [juniper.net] for more information.
PR Number	Synopsis	Category: Key Management Daemon
1909025 Critical	Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received, kmd/iked crashes (CVE-2026-33778) Product-Group=junos Severity=Critical	An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA107868 [juniper.net] for more information.
PR Number	Synopsis	Category: Issues related to Junos licensing infrastructure
1729581 Critical	Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker (CVE-2026-57028) Product-Group=junos Severity=Critical	An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause license exhaustion. Please refer to https://supportportal.juniper.net/JSA110088 [juniper.net] for more details.
1855728 Minor	License is Missed Post System Reboot Product-Group=junos Severity=Minor	On all Junos platforms, the license is lost after a reboot if it was installed using the 'set system license' method.
1872082 Critical	Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root (CVE-2026-33791) Product-Group=junos Severity=Critical	An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system. Please refer to https://supportportal.juniper.net/JSA107875 [juniper.net] for more information.
PR Number	Synopsis	Category: Express Chip L3 software
1877538 Major	Multicast traffic loss is seen when MVPN with node protection is enabled Product-Group=junos Severity=Major	On Junos PTX and QFX10K platforms with node protection enabled on a Multicast Virtual Private Network (MVPN) scenario, multicast traffic loss will be seen when the number of child links in an aggregated ethernet (AE) interface for bypass Label Switched Path (LSP) egress interface is higher than primary LSP and one of the child links goes down on primary LSP egress interface.
PR Number	Synopsis	Category: Path computation client daemon
1929225 Critical	The pccd process crashes when muliple LSP updates are received from PCE Product-Group=junos Severity=Critical	On all Junos and Junos Evolved platforms with PCEP (Path Computation Element Protocol) configured, the pccd process crash is seen when multiple LSP (Label Switched Path) updates are received in a single PCE (Path Computation Element) message. The LSP update sent by the PCE will not get programmed into the forwarding plane and LSP states will not be updated till the pccd process restarts.
PR Number	Synopsis	Category: Issues related to PKI daemon
1901098 Major	PFE Crash observed platforms where PKI and SSL-Proxy services are configured Product-Group=junos Severity=Major	In stressful conditions, FPC crash observed and core file generated when PKI (Public key infrastructure) and SSL-Proxy (Secure Sockets Layer) services are configured, on all Junos platforms supporting PKI and SSL-Proxy services (MX, PTX, SRX).
PR Number	Synopsis	Category: PTX10K Routing Engine
1870082 Critical	Image validation fails during the Junos VM validation Product-Group=junos Severity=Critical	On all Junos platforms that use pkgs/junos-vmguest/mtx/vmhost-pkg-support when loading image to 25.3+, image validation fails.
PR Number	Synopsis	Category: QFX EVPN / VxLAN
1924654 Minor	DC-PFE Core due to Concurrent Filter Reprogramming and VTY Command Execution Product-Group=junos Severity=Minor	While a filter with a routing-instance action was being reprogrammed as part of a CLI commit, a firewall VTY command to dump this filter was executed concurrently. This concurrent access resulted in a DC-PFE core, as filter-related data structures were modified during reprogramming.
PR Number	Synopsis	Category: QFX5K JUNOS Interface, MACSec, Optics, SDK, PHY
1938876 Major	Incorrect interface mode leading to 100G Link Flaps on QFX5210-64C Product-Group=junos Severity=Major	On Junos OS QFX5210-64C platform, 100G optics inherently operate in CAUI-4 (Chip-to-Module 100 Gb/s Four-Lane Attachment Unit Interface) mode, which is automatically selected by the system and not user-configurable; mismatches due to software versions leading to link instability or flapping.
PR Number	Synopsis	Category: SNMP Infrastructure (snmpd, mib2d)
1906718 Critical	Junos OS and Junos OS Evolved: CVE-2022-24805 resolved in net-SNMP Product-Group=junos Severity=Critical	CVE-2022-24805 has been resolved in net-SNMP software included with Juniper Networks Junos OS and Junos OS Evolved. Please refer to https://supportportal.juniper.net/JSA107822 [juniper.net] for more information.
PR Number	Synopsis	Category: SRX branch platforms
1905219 Critical	The traffic on all interfaces of SRX300/SRX320 platforms are dropped while an interface of them is receiving pause frames from connecting device Product-Group=junos Severity=Critical	While an interface of SRX300/SRX320 is receiving pause frames from connecting device, all incoming and outgoing traffic on all interfaces of SRX300/SRX320 was dropped unexpectedly. This issue only occurs when the interface with 'auto-negotiation' disabled receives pause frame. This issue occurs because disabling 'auto-negotiation' causes both 'pause frame' and 'Tx/Rx pause frame' to be set to 'yes'. Connecting device is sending pause frames due to hardware failure.
PR Number	Synopsis	Category: ZT/YT pfe infra issues
1855648 Minor	Junos OS: MX Series: Firewall filters on lo0. in the default routing instance are not in effect (CVE-2026-33774) Product-Group=junos Severity=Minor	An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the configured firewall filter and access the control-plane of the device. Please refer to https://supportportal.juniper.net/JSA107865 [juniper.net] for more information.
1897464 Critical	Memory allocation failure in all the FPCs inside the NH partition Product-Group=junos Severity=Critical	On all affected platforms, under rare conditions involving heavy control-plane churn and a large number of interfaces within a routing instance, memory allocation failures related to Next-Hop processing will occur. This can lead to traffic drops and, in severe cases, complete service disruption across multiple FPCs.
PR Number	Synopsis	Category: N/A:sw-trinity-pfe-inline-map:
1912053 Major	Junos OS: MX Series: Specific traffic causes an FPC to reset (CVE-2026-57019) Product-Group=junos Severity=Major	An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110079 [juniper.net] for more details.
PR Number	Synopsis	Category: Trio pfe bridging, learning, stp, oam, irb software
1950853 Major	Multicast traffic disruption on VLAN after CoS configuration changes Product-Group=junos Severity=Major	On MX platforms , multicast traffic over VLAN interfaces (IRB) will be impacted after certain CoS (Class Of Service) configuration changes. This can result in multicast traffic not reaching downstream receivers.
PR Number	Synopsis	Category: Trio pfe l3 forwarding issues
1902535 Major	Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash (CVE-2026-33800) Product-Group=junos Severity=Major	An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110075 [juniper.net] for more details.
PR Number	Synopsis	Category: Junos Automation, Commit/Op/Event and SLAX
1842247 Critical	Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system (CVE-2026-33793) Product-Group=junos Severity=Critical	An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system. Please refer to https://supportportal.juniper.net/JSA103142 [juniper.net] for more information.
PR Number	Synopsis	Category: UI Infrastructure - mgd, DAX API, DDL/ODL
1704886 Critical	Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information (CVE-2026-33776) Product-Group=junos Severity=Critical	A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. Please refer to https://supportportal.juniper.net/JSA107866 [juniper.net] for more information.
1861779 Major	Junos OS and Junos OS Evolved: EX Series, QFX Series, MX Series: A specific 'show l2-learning/ethernet-switching' command causes l2ald crash (CVE-2026-57025) Product-Group=junos Severity=Major	A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110085 [juniper.net] for more information.
1872703 Major	Junos OS: Privileged local user can gain access to a Linux-based FPC as root (CVE-2025-30650) Product-Group=junos Severity=Major	A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based line cards as root. Please refer to https://supportportal.juniper.net/JSA107863 [juniper.net] for more information.
1947196 Minor	Commitd core dumps observed during specific config commits with "patch generation error - not syncing patch" Product-Group=junos Severity=Minor	Resolved an issue where configuration commits could intermittently fail when applying certain routing policy changes. The problem occurred only under specific conditions during commit processing and could result in the commit operation aborting unexpectedly. This fix improves commit stability when updating routing policies.
PR Number	Synopsis	Category: Issues related to UI management in Logical Systems
1921391 Major	Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command (CVE-2026-33802) Product-Group=junos Severity=Major	A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110077 [juniper.net] for more details.
PR Number	Synopsis	Category: For GPRS security features on highend SRX series
1882028 Critical	Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash (CVE-2026-21914) Product-Group=junos Severity=Critical	An Improper Locking vulnerability in the GTP plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (Dos). Please refer to https://supportportal.juniper.net/JSA106015 [juniper.net] for more information.
PR Number	Synopsis	Category: VMHOST platforms software
1927342 Major	Junos VMhost platforms restart unexpectedly due to deadlock Product-Group=junos Severity=Major	On all Junos VMhost platforms, when Junos performs disk access, a rare deadlock involving FreeBSD kernel processes will occur. This condition causes FreeBSD kernel panic, resulting in crash of vmcore and an unexpected device restart, leading to temporary system unavailability.

Extended Solution

22.2R3-S8 - List of Known issues

PR Number	Synopsis
1965832 Major	DNS cache failure occurs when the number of routes to the DNS server is a multiple of 256, causing FQDN object resolution to fail on SRX platforms Product-Group=junos
PR Number	Synopsis
1954404 Major	ACX5448 platform variants fpc restart due to packet forwarding engine process crash Product-Group=junos
PR Number	Synopsis
1913260 Major	Discrepancy noticed in the interfaces when there is a reset in Linecard or PFE Product-Group=junos
1923848 Major	Junos Evolved platfrom, when gNMI collecting data from "optics/lanediags/lane/lane_laser_receiver_power_dbm" and "optics/lanediags/lane/lane_laser_output_power_dbm" are unreadable Product-Group=junos
PR Number	Synopsis
1965224 Major	Incorrect high-temperature readings trigger chassis shutdown Product-Group=junosvae
PR Number	Synopsis
1909540 Major	config commit on Juniper ACX device hangs Product-Group=junos
PR Number	Synopsis
1922536 Major	Forwarding issues for an access DHCPv6-PD or access-internal DHCPv6-IA route or both may be seen on LNS due to an incorrect route programming of such route on PFE Product-Group=junos
PR Number	Synopsis
1942159 Major	New subscriber login request failure is seen due to missing PFE readiness update after boot Product-Group=junos
PR Number	Synopsis
1856217 Major	Memory corruption in bbe-statsd due to double free for IP demux lite subscribers Product-Group=junos
PR Number	Synopsis
1846448 Major	The S-BFD responder session cannot be distributed to PFE and failing S-BFD session to establish Product-Group=junos
PR Number	Synopsis
1818545 Major	BGP-LU Label is incorrect after convergence Product-Group=junos
1845169 Major	BGP stops advertising VPN routes to EBGP peer if static route-target-filter as local is configured Product-Group=junos
1854194 Major	Handling cores when always-compare-med is configured in BGP path selection Product-Group=junos
1880630 Major	Some BGP sessions remain in the Idle state after all interfaces are deactivated and rollback is issued Product-Group=junos
1881717 Major	Incorrect MPLS label derivation with inactive EBGP route advertisement Product-Group=junos
1889749 Critical	BGP Prefix-SID Label collision causing RPD crash Product-Group=junos
1907391 Major	Routes are hidden when accept-own feature is enabled with rib-sharding Product-Group=junos
1914814 Major	BGP task replication will be stuck in 'InProgress' state following an RE switchover when two single hop EBGP sessions are configured on two different interfaces using the IP addresses from the same subnet Product-Group=junos
1915893 Major	The rpd process crash triggered by LLGR stale timer expiry and late reconnection of unconfigured BGP peer on helper node Product-Group=junos
1954341 Major	EIBGP ECMP routes are not re-evaluated after modifying the allow-external-internal prefix-policy Product-Group=junos
1969577 Major	The rpd process crashes when deleting BGP VPN routing instances during an active SNMP walk on the RIB Product-Group=junos
1976553 Major	, BGP flaps when receives malformed BGP packets on the backup RE Product-Group=junos
PR Number	Synopsis
1785723 Major	When BGP rib-sharding is enabled, show bgp bmp output hangs Product-Group=junos
PR Number	Synopsis
1826901 Major	The authd process crash is seen when subscriber management is enabled Product-Group=junos
1967413 Major	The authd process crash is seen when IPv6 address is set as the source address under the radius-server Product-Group=junos
PR Number	Synopsis
1933347 Major	Continuous I/O ata timeout errors and alarms are seen for secondary SSD read accesses Product-Group=junos
1945622 Minor	On MX304 platforms, error logs are seen after reboot, due to a missing file presence check Product-Group=junosvae
PR Number	Synopsis
1801760 Major	The dot1xd process crashes during large-scale 802.1x authentication scenarios due to a defect in dynamic VLAN handling in multiple supplicant mode Product-Group=junos
1905612 Major	Correct values of ACCTG-Terminate-cause are not getting populated in ACCTG-STOP message. Product-Group=junos
PR Number	Synopsis
1921796 Minor	Traffic dropped after priority change in VRRP with EVPN-VxLAN scenario Product-Group=junos
1926468 Major	EVPN-VXLAN: Duplicate Proxied Neighbor Advertisements Missing Router/Override Flags Disrupt IPv6 Connectivity Product-Group=junos
PR Number	Synopsis
1722823 Major	The FPC crash is observed on Junos MX10008 platform when connected to non-Juniper SFP Product-Group=junos
PR Number	Synopsis
1961126 Major	Commit validation failure when AE member interface speed is configured under chassis hierarchy Product-Group=junos
PR Number	Synopsis
1903874 Major	[MX10008] cmd='ls -i /var/etc/filters/filter-define.conf' is logged every 1 second instead of every 30 seconds Product-Group=junos
PR Number	Synopsis
1899540 Major	DNX error logs consuming syslog in ACX platforms post upgrade causing display issue Product-Group=junos
PR Number	Synopsis
1889637 Major	DHCP clients do not come up when VRF leak and "dhcp-relay" with "no-snoop" are configured under a routing-instance Product-Group=junos
PR Number	Synopsis
1948145 Major	ACX5448 platform experiences a panic reboot and generates vmcore crash files in a rare scenario Product-Group=junosvae
PR Number	Synopsis
1930036 Major	High memory usage is showing, when we configure unsupported licensing feature Product-Group=junos
PR Number	Synopsis
1899530 Major	MAC learning failure when moving the AE interface from one VLAN to another VLAN in a single commit Product-Group=junos
PR Number	Synopsis
1894803 Major	Inconsistency is observed between the ARP table learned on PE devices in EVPN-MPLS or EVPN-VXLAN Multihoming scenario Product-Group=junos
1964040 Major	Traffic loss for EVPN-MPLS virtual gateway after routing instance changes Product-Group=junos
PR Number	Synopsis
1926818 Major	ARP resolution failure for /32 static host routes via IRB in EVPN virtual-switch routing instances Product-Group=junos
1951682 Major	Intermittent traffic loss due to re-arp failure of ARP entries learnt over VTEP Product-Group=junos
PR Number	Synopsis
1901837 Major	PFE crashes on QFX5K and EX4K platforms in standalone and VC setups due to logging of PFE Product-Group=junos
1912078 Major	Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash (CVE-2026-57032) Product-Group=junos
1948465 Major	In scaled 802.1X environments, toggling 802.1X or port flaps can cause overlapping control-plane events, overwhelming the PFE and causing traffic disruptions Product-Group=junos
PR Number	Synopsis
1904884 Major	VCP link flap due to SYSPLD read failures Product-Group=junos
PR Number	Synopsis
1824592 Major	Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash (CVE-2026-57027) Product-Group=junos
1939656 Major	IPv6 neighbor is not switching to the correct Redundant Trunk Group (RTG) link when the primary link comes back up after a failover scenerio. Product-Group=junos
1943278 Minor	FXPC crash triggered by firewall filter modification leading to PFE restart on Junos EX/QFX platforms Product-Group=junos
1975711 Major	Intermittent MAC flushing in EVPN-VXLAN after underlay flapping Product-Group=junos
PR Number	Synopsis
1858986 Major	EX4400: Error message 'Failed to read eeprom' intermittently on SFP Product-Group=junos
PR Number	Synopsis
1930080 Minor	PoE outage observed on EX4400 in a rare scenario Product-Group=junos
PR Number	Synopsis
1952451 Major	The dcpfe process crash is seen on QFX10002-60C platforms during high frequency route churn Product-Group=junos
PR Number	Synopsis
1896521 Minor	Intermittent "broadsync_lock_failure" alarms are seen on Junos OS Evolved ACX platforms Product-Group=junos
PR Number	Synopsis
1960371 Major	RG1 failover is not automatically triggered after fan failures on SRX4100/SRX4200 chassis clusters, resulting in traffic degradation Product-Group=junos
1963533 Major	An operationally down interface might trigger "DPDK port is stuck with hardware issue!!!" error log Product-Group=junosvae
PR Number	Synopsis
1861810 Major	The rpd process crash is observed while adding and removing dynamic-tunnels with scaled tunnel configuration Product-Group=junos
1966878 Major	The rpd process might restart during normal routing events due to a rare timing condition Product-Group=junos
PR Number	Synopsis
1852278 Major	With rib-sharding enabled, IPFIX exports wrong SrcAS / DstAS fields Product-Group=junos
1981380 Major	Heap exhaustion generates a crash file and triggers a linecard reboot on mx platforms using affected line cards Product-Group=junos
PR Number	Synopsis
1938565 Major	LACP remains in collecting and distributing state after GRES on PE and interface flap with lacp-oos-on-ndf enabled Product-Group=junos
PR Number	Synopsis
1937971 Major	LDP-IGP synchronization remains stuck in holddown state on ISIS multiinstance interfaces Product-Group=junos
PR Number	Synopsis
1825998 Major	DHCP ALQ process crashes to recover from memory leak. Product-Group=junos
1876407 Major	Junos OS and Junos OS Evolved: DHCP Option 82 messages from clients being passed unmodified to the DHCP server (CVE-2025-59960) Product-Group=junos
1911001 Major	On Junos devices supporting subscriber services acting as DHCPv6 relay randomly deletes IA_NA or IA_PD binding/route Product-Group=junos
1927449 Major	Jdhcpd cores generated after upgrade Product-Group=junos
1934742 Major	DHCPv6 Relay Active Leasequery not able to establish TCP session to peer Product-Group=junos
1967994 Major	Subscribers cannot obtain IP addresses nor renew DHCP leases when configuring persistent-storage for DHCP Product-Group=junos
PR Number	Synopsis
1876709 Critical	Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS (CVE-2026-57030) Product-Group=junos
1903515 Major	On the SRX platform the FPC reboots when traffic reaches the FAT IPSec tunnel Product-Group=junos
1941734 Major	SRX device becomes unresponsive and crashes after committing VXLAN related configuration changes Product-Group=junos
1963939 Major	Packet drops are seen in policy-based IPsec VPN scenario when IKE gateway 'external-interface is interface set to lo0 Product-Group=junos
1967295 Major	Multicast template session synchronization can cause packet forwarding disruption in SRX chassis clusters Product-Group=junos
PR Number	Synopsis
1895134 Minor	ISSU failure and process crash on primary node during HA upgrade Product-Group=junos
PR Number	Synopsis
1882193 Major	On SRX platform, flowd process is generating crash files Product-Group=junos
PR Number	Synopsis
1889298 Major	Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously (CVE-2026-57024) Product-Group=junos
1912271 Major	State synchronization failure between SRX cluster nodes Product-Group=junos
1933443 Major	The st0 interface keeps up state during VPN down Product-Group=junos
1937239 Major	Srxpfe process crash due to memory allocation errors triggered by IPsec processing Product-Group=junos
1964908 Major	IPsec tunnel goes down/up on a non-Juniper peer device every time at phase1 rekey Product-Group=junos
PR Number	Synopsis
1725808 Critical	Junos OS: J-Web: Multiple vulnerabilities resolved in PHP software (CVE-2023-0567, CVE-2023-0662, CVE-2023-3823, CVE-2023-3824, CVE-2023-0568) Product-Group=junos
1931780 Major	The Captive Web Authentication might not be completed on specific Junos versions for EX Series switch Product-Group=junos
PR Number	Synopsis
1764808 Major	The BGP replication state is stuck in-progress and the rsync session is flapping continuously Product-Group=junos
PR Number	Synopsis
1930380 Major	The hash collision for storm control profile indices will result in an l2ald process crash Product-Group=junos
PR Number	Synopsis
1816344 Major	EVPN : Traffic failure after multiple link flaps of core facing interfaces on scaled setup Product-Group=junos
PR Number	Synopsis
1874126 Major	AE member not able to discover lost LACP peer connection leading to traffic black-holing Product-Group=junos
PR Number	Synopsis
1852934 Major	The rpd process crash is seen during RE switchover Product-Group=junos
1906611 Major	Crash in the rpd process after LDP P2MP LSP Identifier reaches its maximum value and rolls over, due to duplicate identifier allocation Product-Group=junos
PR Number	Synopsis
1925706 Minor	Snmp license polling cause license-check service crash Product-Group=junos
PR Number	Synopsis
1945343 Major	Disabling one port in the breakout port channel makes another port down Product-Group=junos
PR Number	Synopsis
1793982 Major	Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash (CVE-2026-21909) Product-Group=junos
1889546 Major	MPLS ping/trace not working for direct peers via routing-instance over MPLS protocols Product-Group=junos
1908506 Major	Frequent link-protection flaps are observed for container LSP's with no change in member LSP Product-Group=junos
1923867 Minor	The rpd process crash is observed after a graceful restart in the RSVP-TE scenario Product-Group=junos
PR Number	Synopsis
1902405 Major	The rpd process crash is observed with MVPN and RIB sharding enabled Product-Group=junos
PR Number	Synopsis
1846557 Major	When "set chassis redundancy failover on-re-to-fpc-stale" is configured unexpected master RE switchover will be seen if backup RE reboots resulting in traffic disruption Product-Group=junos
PR Number	Synopsis
1778324 Major	The FPC connection times out and reboots post mastership switchover Product-Group=junos
PR Number	Synopsis
1803006 Major	On Junos simultaneous SSH connections can fail during high process utilization Product-Group=junos
PR Number	Synopsis
1795218 Major	JUNOS_REG: MX : With the GR interface configured, ASIC error at PFE can trigger vmcore on backup. Product-Group=junos
1953864 Major	MX304: GRE interface flap after RE switchover Product-Group=junos
PR Number	Synopsis
1828196 Major	Error messages are seen due to high CPU utilization Product-Group=junos
PR Number	Synopsis
1880262 Major	PIM neighbors timeout on backup RE due to inconsistent state with master Product-Group=junos
PR Number	Synopsis
1909719 Critical	Junos and Junos OS Evolved platforms experience high CPU after FPC reboot causing unpredictable issues with protocols (OSPF/ISIS/BGP, etc.) managed by PPMD Product-Group=junos
1935823 Major	Protocols dependent on ppmd like LACP fails to recover after a GRES Product-Group=junos
PR Number	Synopsis
1868007 Major	PPPoE subscriber login failures observed after interface flapping resulting in AC system errors on Junos MX Platforms Product-Group=junos
PR Number	Synopsis
1921455 Major	The dcpfe process crashes when adding or removing classifier configuration on QFX5210 Product-Group=junos
PR Number	Synopsis
1922278 Major	IPV6 auto negotiation Router Advertisement packet is missed over configured L2 circuit Product-Group=junos
PR Number	Synopsis
1938291 Major	Deactivating sub-interfaces on flexible ethernet ports leads to VLAN traffic loss Product-Group=junos
PR Number	Synopsis
1854995 Major	The dcpfe crash will be seen on Junos QFX5200 platforms due to route churn Product-Group=junos
1870380 Major	Traffic loss is seen due to ECMP resource exhaustion on QFX5200, even after ECMP group usage is lower than the threshold Product-Group=junos
1886612 Major	Next-hop entries are not getting programmed in ECMP unilist group after device upgrade Product-Group=junos
1905607 Major	Hardware MTU stuck at default value, causing packet drops on VXLAN Interfaces Product-Group=junos
1944799 Major	ARP is not resolved on directly connected interface of Junos QFX5K platform enabled with Spanning Tree protocol Product-Group=junos
1947250 Major	Next-hop updates may fail for host routes installed in the LPM table when lpm-profile is configured without the unicast-in-lpm option Product-Group=junos
PR Number	Synopsis
1877194 Major	Traffic drop is seen in a scaled scenario on certain EX platforms Product-Group=junos
1933698 Major	PFE crash due to memory corruption in EVPN-VxLAN type5 overlay ECMP at high tunnel next hop scale Product-Group=junosvae
1939298 Major	Traffic drop is seen due to tagged IRB L3 interface with native-vlan and vlan members Product-Group=junos
1940800 Major	QFX5110 incorrectly converts untagged native VLAN traffic to tagged traffic on VXLAN egress Product-Group=junos
1952118 Major	In the EVPN VXLAN scenario restart routing causes multicast traffic disruption Product-Group=junos
1962277 Major	AE interface remains down after enabling 'lag-heap-optimization' with LACP and 'native-vlan-id' configured Product-Group=junos
1969241 Major	Duplicate egress VLAN-translation entry additions in VXLAN configurations cause a forwarding-plane memory leak on QFX5K and EX4K switches Product-Group=junos
PR Number	Synopsis
1900610 Minor	The SNMP OID for CRC errors does not increment properly Product-Group=junos
PR Number	Synopsis
1938921 Major	Software rollback may cause device to become unresponsive on Junos platforms with qfx-5e image Product-Group=junosvae
PR Number	Synopsis
1951132 Major	rpd crash caused by stale deleted tunnel entry Product-Group=junos
PR Number	Synopsis
1908681 Major	RIB and the FIB inconsistency results in traffic loss in IPsec scenario with st0 interface configured Product-Group=junos
1929521 Major	Transient multicast traffic loss after Routing Engine switchover when PIM with IGMP or MLD is enabled Product-Group=junos
PR Number	Synopsis
1866522 Major	VPLS session stays down after interface flaps Product-Group=junos
PR Number	Synopsis
1863248 Major	On all Junos OS Evolved platforms, traffic loss will be seen after switching the LSP from SRTE to L-ISIS Product-Group=junos
1922237 Major	In Class-Based Forwarding with ECMP scenario traffic gets dropped due to incorrect next-hop handling process in PFE programming Product-Group=junos
PR Number	Synopsis
1853895 Major	Service route is hidden over BGP LU multipath upon neighbor route withdrawn Product-Group=junos
1858032 Major	The rpd process crashes when generate routes are configured in a rib-sharding scenario Product-Group=junos
PR Number	Synopsis
1757915 Major	The rpd process crashes when processing multipath routes with mixed indirect and composite next-hops under rib-sharding Product-Group=junos
1854481 Major	The rpd gets struck with 100% CPU usage after enabling BGP RIB-Sharding Product-Group=junos
PR Number	Synopsis
1842654 Major	RPD process crash observed with dynamic tunnel configuration with overlap in destination networks under APP based and NHB mode and rollback Product-Group=junos
1907558 Major	The rpd process crashes in a vrf having EVPN-VXLAN routes with specific configuration. Product-Group=junos
PR Number	Synopsis
1767102 Major	Regular expression (*) does not work when used with 'match-prefix' Product-Group=junos
PR Number	Synopsis
1945202 Major	MSDP Source-Active Advertisement Delay in Anycast-RP Deployments Causes 100-150 ms of Missing Audio at the Beginning of Multicast Voice Streams Product-Group=junos
PR Number	Synopsis
1864949 Major	User traffic dropped after ISIS went down on one side with trapcode observed Product-Group=junos
1866944 Major	Traffic blackholing in LSPs due to link failure before protection signalling is processed Product-Group=junos
PR Number	Synopsis
1965967 Critical	Traffic loss on MX960 after chassis zone power failure Product-Group=junos
PR Number	Synopsis
1865633 Major	Junos OS: A low-privileged user can escalate their privileges so that they can log in as root (CVE-2026-21916) Product-Group=junos
PR Number	Synopsis
1866948 Major	SNMPV3 Engine-ID does not update to MAC address as configured Product-Group=junos
PR Number	Synopsis
1860334 Major	A momentary drop in traffic is observed when changes are applied on multipath SR-TE LSPs Product-Group=junos
1970382 Major	rpd crash during SR-TE path computation with SID-stack compression on Junos OS and Junos OS Evolved platforms Product-Group=junos
1978382 Major	Telemetry streaming failure for colored MPLS SR-TE tunnels on Junos and Junos OS Evolved platforms Product-Group=junos
PR Number	Synopsis
1968607 Major	Errors flooded on the console when trying to enrol to ATP cloud Product-Group=junos
PR Number	Synopsis
1934517 Major	SRX380 XE interface flap on every configuration commit with 1G SFP transceivers Product-Group=junos
1979888 Major	Excessive delay in HA link packet reception cause jsrpd to mark control and fabric links down on SRX chassis cluster resulting in spilt-brain scenario Product-Group=junos
PR Number	Synopsis
1803105 Major	PTP attribute changes on upstream device causes best clock master slot switchover Product-Group=junos
PR Number	Synopsis
1972055 Major	MX Series node-slicing report a persistent craft-control chassis alarm after boot Product-Group=junos
PR Number	Synopsis
1771971 Critical	Invalid FPC port profile alarms are seen on SRX4600 cluster after manual failover to node0. Product-Group=junos
PR Number	Synopsis
1882845 Critical	MPC 10/11/12E, LC9600 and LC4800 Line cards and MX304, interface statistics stop after interrupt Product-Group=junos
PR Number	Synopsis
1980157 Major	A partial PFE disable event on MPC5E and MPC6E line cards can cause inline BFD sessions to remain down Product-Group=junos
PR Number	Synopsis
1886395 Major	FPC crash is seen on Junos platforms in a rare scenario Product-Group=junos
PR Number	Synopsis
1924812 Minor	Dual stack PPPoE/DHCPv6 syslog reports PFE_ERROR_INVALID_STATE fd01:3333:b205:44f1:: /64 => source lookup is not enabled for flow 18558885 Product-Group=junos
1929254 Major	FPC crash triggered by peer member restart in AE bundle Product-Group=junos
1962083 Major	Invalid interface flag errors are generated during Point-to-Point Protocol over Ethernet subscriber logout on MX platforms with line cards (MPC1 to MPC9E) Product-Group=junos
PR Number	Synopsis
1958296 Major	FPC major alarm triggered by AE member link flaps resulting in PFE being disabled Product-Group=junos
1980167 Minor	The CMError 'CMERROR_SCHED_CORE_ECC_ERR' results in PFE disable and associated interfaces going down Product-Group=junos
PR Number	Synopsis
1919115 Major	MPC restart during commit when modifying the prefix-list in firewall filters Product-Group=junos
1966654 Major	Heap memory leak causing new subscriber login failures on deployments using PPPoE subscriber policer Product-Group=junos
PR Number	Synopsis
1970213 Major	Packet drops occurs in EVPN-VPWS FxC deployments when egress VLAN rewrite is configured Product-Group=junos
PR Number	Synopsis
1927194 Major	When a resolution for an IPv4/IPv6 address fails, NH IFL is throttled causing service impact Product-Group=junos
PR Number	Synopsis
1801213 Major	DDOS protection Max arrival rate shows incorrect values Product-Group=junos
PR Number	Synopsis
1957187 Major	MAC RADIUS CoA requests fail when the RADIUS server uses a management routing instance on Junos platforms Product-Group=junos
PR Number	Synopsis
1912160 Major	Slow memory leak observed in eventd process on all Junos and Junos OS Evolved Product-Group=junos
PR Number	Synopsis
1858635 Critical	ACX Series vmcore crash when netconf notifications are enabled Product-Group=junos
PR Number	Synopsis
1843789 Critical	Management Daemon (MGD) when executing certain configuration display commands with the display json option in the CLI Product-Group=junos
PR Number	Synopsis
1826630 Major	Annotations are improperly structured in NETCONF after enabling YANG compliance Product-Group=junos
PR Number	Synopsis
1952922 Major	One-time IPsec VPN renegotiation is observed on SRX platforms during the first configuration commit after upgrading to affected Junos OS 24.4 and later releases Product-Group=junos
PR Number	Synopsis
1950808 Major	Browsing traffic can fail after prolonged operation when content filtering is enabled Product-Group=junos
PR Number	Synopsis
1953486 Major	Traffic drops observed when using url-category without web filtering profile on Junos SRX Platforms Product-Group=junos
1965721 Major	Upon an ISSU or ICU upgrade to Junos 23.4R2-S5 the web-filtering starts blocking traffic for URLs that are configured with action log-and-permit Product-Group=junos
PR Number	Synopsis
1913169 Major	The smdp process crash is observed on MX Aggregation Device during Junos upgrade in a Junos Fusion Deployment Product-Group=junos
PR Number	Synopsis
1827549 Minor	Large number of memory errors which slows down the system Product-Group=junos
PR Number	Synopsis
1945668 Major	Upgrading vSRX to Junos 24.4R2-S3 and above causes AE bundling issues and traffic loss Product-Group=junos
1953712 Major	vSRX3.0 connectivity loss and service disruption due to traffic interruption during processing delays Product-Group=junos
PR Number	Synopsis
1830457 Major	On Junos MX2020 platform with non-native LC, HSL2 'failed word alignment' error causes the fabric planes to go in check state Product-Group=junos
PR Number	Synopsis
1913560 Major	Routing Engine restart on MX platforms with SPC3 line card could cause loss of traffic processing Product-Group=junos
PR Number	Synopsis
1876801 Major	IPsec-inside-IPsec tunnel establishment fails on MX platforms with SPC3 cards Product-Group=junos
PR Number	Synopsis
1829633 Critical	The flowd process crashes in scaled scenario when subscribers exceed maximum session limit for NAPT44 on MX platforms with MX-SPC3 Product-Group=junos
1881192 Major	NAT Pool Installation failure due to Service-Set name length mismatch Product-Group=junos
1979321 Major	SPC3 CGNAT fails to restore ICMP Echo Identifier when original Query Identifier is 0x0000 Product-Group=junos
PR Number	Synopsis
1868509 Major	CGNAT traffic is dropped when inactive mams interface in AMS due to an empty slot or defective SPC3 card in slot Product-Group=junos