Alert Type

SRN - Software Release Notification
Low/NotificationSoftware Release Notification
Low/NotificationSoftware Release Notification

Product Affected

22.3R3-S5 EEOL FIPS Junos - Junos FIPS version 22.3 for ACX5448 family, MX family with MACSec, EX9200 family with MACSec, EX4650-48Y, QFX5110, QFX5120, QFX5200 family

Alert Description

Junos Software Service Release version 22.3R3-S5 is now available for download from the Junos software download site

Download Junos Software Service Release:

  1. Go to Junos Platforms - Download Software page
  2. Input your product in the "Find a Product" search box
  3. From the Type/OS drop-down menu, select Junos SR
  4. From the Version drop-down menu, select your version
  5. Click the Software tab
  6. Select the Install Package as need and follow the prompts

NOTE: Starting on August 30th, 2024, we include PR's severity with each entry. See KB86335 [juniper.net] for the definition of PR's Severity

 

Junos Selective Update (JSU) feasible

Not applicable

Call to Action

For your review

Solution

Junos Software service Release version 22.3R3-S5 is now available.

22.3R3-S5 - List of Fixed issues

PR NumberSynopsisCategory: EVO Debug collector
1868326
Major		FPC commands repeatedly prompt for a password and fail when debug-collector is run by non-root users
Product-Group=junos
Severity=Major		On all Junos EVO platforms, when debug-collectors are run by non-root users the flexible physical interface card concentrators (FPC) commands repeated prompt for passwords. The commands will fail to run though the password is provided.
PR NumberSynopsisCategory: MX Services URL filter
1926259
Major		Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs (CVE-2026-57054)
Product-Group=junos
Severity=Major		A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows a unauthenticated, network-based attacker to bypass web filtering and access downstream resources that should be unreachable. Please refer to https://supportportal.juniper.net/JSA110093 [juniper.net] for more information.
PR NumberSynopsisCategory: "agentd" software daemon
1870467
Minor		Memory leak is observed in evoaft-jvisiond process on all Junos Evolved platforms
Product-Group=junos
Severity=Minor		On all Junos Evolved platforms with telemetry configured, memory leak in evoaft-jvisiond process is observed when on-change sensor installation is done. The issue impacts service as evoaft-jvisiond may restart when it reaches maximum memory. There is no traffic impact due to the issue.
PR NumberSynopsisCategory: BBE Autoconfigured DVLAN related issues
1853434
Major		Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd (CVE-2026-33775)
Product-Group=junos
Severity=Major		A Missing Release of Memory after Effective Lifetime vulnerability in the BroadBand Edge subscriber management daemon (bbe-smgd) of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA107821 [juniper.net] for more information.
PR NumberSynopsisCategory: Border Gateway Protocol
1818545
Major		BGP-LU Label is incorrect after convergence
Product-Group=junos
Severity=Major		On all Junos and Junos OS Evolved platforms, traffic coming in with the BGP-LU label can drop post link-failure when BGP-LU (Border Gateway Protocol-Labeled-Unicast) with 'per-prefix-label' and IGP TI-LFA (Topology-Independent Loop-Free Alternate) is enabled.
1855477
Critical		Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset (CVE-2025-52953)
Product-Group=junos
Severity=Critical		An Expected Behavior Violation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker sending a valid BGP UPDATE packet to cause a BGP session reset, resulting in a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA100059 [juniper.net] for more information.
1883803
Major		Junos OS and Junos OS Evolved: Executing a specific show command leads to an rpd crash (CVE-2025-59959)
Product-Group=junos
Severity=Major		An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA103148 [juniper.net] for more information.
1884492
Major		Junos OS and Junos OS Evolved: Optional transitive BGP attribute is modified before propagation to peers causing sessions to flap (CVE-2025-60011)
Product-Group=junos
Severity=Major		An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an availability impact for downstream devices. Please refer to https://supportportal.juniper.net/JSA103161 [juniper.net] for more information.
PR NumberSynopsisCategory: Track PRs in BGP Flow Spec area & is part of BGP inside RPD.
1945627
Minor		BGP IPv6 Flow Specification Session Flapping When inet6-flow Is Enabled
Product-Group=junos
Severity=Minor		In certain Junos OS releases, BGP sessions may repeatedly reset when IPv6 Flow Specification (inet6-flow) is enabled. This behavior occurs when the router receives specific IPv6 Flow Specification updates that include a default (wildcard) match. Earlier releases do not exhibit this behavior, leading to a difference in observed stability when upgrading.
PR NumberSynopsisCategory: BBE Remote Access Server
1822300
Major		Junos OS and Junos OS Evolved: Vulnerability in the RADIUS protocol for Subscriber Management (Blast-RADIUS) (CVE-2024-3596)
Product-Group=junos
Severity=Major		An Improper Validation of Integrity Check Value and Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in subscriber services of Juniper Networks Junos OS and Junos OS Evolved allows an on-path attacker between a RADIUS server and the RADIUS client to bypass authentication. Please refer to https://supportportal.juniper.net/JSA100056 [juniper.net] for more information.
PR NumberSynopsisCategory: Device Configuration Daemon
1848768
Major		MTU configuration is not applied from the configuration group after commit and "warning" is seen
Product-Group=junos
Severity=Major		When configuring MTU on interfaces through a configuration-group and commit the changes, those are not saved on the configuration file.
PR NumberSynopsisCategory: Firewall Filter
1844796
Major		Junos OS: IPv6 firewall filter fails to match payload-protocol (CVE-2025-52951)
Product-Group=junos
Severity=Major		A Protection Mechanism Failure vulnerability in kernel filter processing of Juniper Networks Junos OS allows an attacker sending IPv6 traffic destined to the device to effectively bypass any firewall filtering configured on the interface. Please refer to https://supportportal.juniper.net/JSA100055 [juniper.net] for more information.
PR NumberSynopsisCategory: EVO L2 Control Plane PRs
1852019
Major		The l2ald process crash is observed when same Type 5 MAC-IP received with same IP and different MAC
Product-Group=junos
Severity=Major		On all Junos and Junos Evolved platforms, the L2ALD (Layer 2 Address Learning Daemon) process crash is observed in rare cases, when in EVPN (Ethernet Virtual Private Network) VXLAN (Virtual eXtensible Local-Area Network) scenario, Type 5 MAC-IP (Media Access Control Address - Internet Protocol) entry is freed after another MAC-IP request is received with same IP and different MAC. There is no traffic impact observed.
PR NumberSynopsisCategory: event/op/commit scripts, SLAX, netconf issues
1892840
Major		An enhancement to increase the commit scripts max-data-size from 2Gb to 8Gb
Product-Group=junos
Severity=Major		On release 22.3X50 and 22.3X60, the commit scripts max-data-size is increased from 2Gb to 8Gb.
PR NumberSynopsisCategory: mgd, ddl, odl infra issues
1762342
Major		A CLI crash is observed on Junos OS Evolved platforms
Product-Group=junos
Severity=Major
PR NumberSynopsisCategory: EVPN Layer-2 Forwarding
1926818
Major		ARP resolution failure for /32 static host routes via IRB in EVPN virtual-switch routing instances
Product-Group=junos
Severity=Major		On all Junos and Junos Evolved platforms that support EVPN (Ethernet VPN) virtual-switch routing instances, ARP (Address Resolution Protocol) resolution fails for static host routes configured with a /32 mask when the next-hop interface is an IRB (Integrated Routing and Bridging) interface and the destination host resides in a different subnet. As a result, ARP entries are not installed, MAC (Media Access Control) addresses of destination hosts are not learned, and traffic destined to those hosts becomes unreachable, causing service impact.
PR NumberSynopsisCategory: EX4400 PFE software
1718316
Major		The fxpc daemon crash is observed on Junos EX4400 platforms in a Virtual chassis setup with HGoE mode
Product-Group=junos
Severity=Major		On Junos EX4400 platforms with a Virtual Chassis(VC) setup and operating in a HiGig over Ethernet (HGoE) mode, the Packet Forwarding Engine manager (fxpc) daemon crash is observed when reload of switch or switchover happens. Due to this crash, the Packet Forwarding Engine(PFE) will be restarted and traffic through it will be impacted.
PR NumberSynopsisCategory: EX4400 platform
1942085
Major		EX4400: Kernel panic and unexpected reboot on certain EX4400 platforms due to CPU erratum
Product-Group=junos
Severity=Major		On EX4400 product family platforms, device experienced an unexpected reboot and recovers automatically. The system logs indicate a kernel panic, and a VMcore file is generated. Traffic impact will be seen until the recovery. Bios version CDEN_P_EX1_00.22.01.00 fixes this issue.
PR NumberSynopsisCategory: PFE EVPN / VxLAN related issues on EX platforms
1847849
Critical		Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop (CVE-2026-21910)
Product-Group=junos
Severity=Critical		An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on EX4k Series and QFX5k Series platforms allows an unauthenticated network-adjacent attacker flapping an interface to cause traffic between VXLAN Network Identifiers (VNIs) to drop, leading to a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA106009 [juniper.net] for more information.
PR NumberSynopsisCategory: Express PFE L2 fwding Features
1792128
Major		Configuring multiple IFL of different families on Junos QFX10K SP style interfaces leads to traffic loss
Product-Group=junos
Severity=Major		On Junos QFX 10K platforms, traffic drop is seen when multiple interface logical (IFLs) of different families are configured on the same interface physical (IFD) with Service Provide (SP) style configuration and layer 2 (L2) ILF is the first IFL to be created.
1916949
Major		Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood (CVE-2026-57020)
Product-Group=junos
Severity=Major		An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110080 [juniper.net] for more information.
PR NumberSynopsisCategory: jdhcpd daemon
1777055
Major		Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts (CVE-2026-33782)
Product-Group=junos
Severity=Major		A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attacker to cause a memory leak, that will eventually cause a complete Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA107820 [juniper.net] for more information.
PR NumberSynopsisCategory: Adresses ALG issues found in JSF
1932051
Critical		Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash (CVE-2026-57026)
Product-Group=junos
Severity=Critical		An Improper Validation of Syntactic Correctness of Input vulnerability in the SIP plugin of Juniper Networks Junos OS on MX Series with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110086 [juniper.net] for more information.
PR NumberSynopsisCategory: Firewall Network Address Translation
1897060
Major		Junos OS: SRX Series : In a NAT64 configuration, receipt of a specific, malformed ICMPv6 packet will cause the srxpfe process to crash and restart. (CVE-2026-33790)
Product-Group=junos
Severity=Major		An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart. Continued receipt and processing of these packets will repeatedly crash the srxpfe process and sustain the Denial of Service (DoS) condition.Please refer to https://supportportal.juniper.net/JSA107874 [juniper.net] for more information.
PR NumberSynopsisCategory: Key Management Daemon
1909025
Critical		Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received, kmd/iked crashes (CVE-2026-33778)
Product-Group=junos
Severity=Critical		An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA107868 [juniper.net] for more information.
PR NumberSynopsisCategory: Layer2 forwarding on EX/NFX/PTX/QFX
1824956
Major		Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald (CVE-2026-33780)
Product-Group=junos
Severity=Major		A Missing Release of Memory after Effective Lifetime vulnerability in the Layer 2 Address Learning Daemon (l2ald) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a memory leak ultimately leading to a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA107819 [juniper.net] for more details.
1928530
Critical		A buffer overflow during IPv6 NDP operations in an EVPN environment caused segmentation faults leading to FPC crash files and repeated reboots
Product-Group=junos
Severity=Critical		On JunOS MX240/MX480/MX960/MX2008/MX2010/MX2020 platforms with MPC10E/MPC11E line cards as well as the MX304 platform, an issue in IPv6 EVPN (Ethernet Virtual Private Network) during NDP (Neighbor Discovery Protocol) resolicitation of a link local target address causes the system to use the IRB link local address in outgoing packets. Stack corruption happens when handling the IRB link local address and resulting in continuous FPC (Flexible PIC Concentrator) reboots (around 3 or 4 times) and crash files generation.
PR NumberSynopsisCategory: Port-based link layer security services and protocols that a
1758838
Major		Allow encryption offset with XPN cipher, but may not interoperate
Product-Group=junos
Severity=Major		Allowing offset configuration even for XPN cipher, for some specific deployment. This may not be interoperable.
PR NumberSynopsisCategory: Kernel Multicast Infrastructure
1740390
Major		vPTX: PFE crash is seen due to invalid token from RPD
Product-Group=junos
Severity=Major		On vPTX platforms, the PFE (packet forwarding engine) receives an invalid token from RPD (Routing Engine daemon) for composites next-hops due to which the PFE will crash leading to traffic drop.
PR NumberSynopsisCategory: Path computation client daemon
1929225
Critical		The pccd process crashes when muliple LSP updates are received from PCE
Product-Group=junos
Severity=Critical		On all Junos and Junos Evolved platforms with PCEP (Path Computation Element Protocol) configured, the pccd process crash is seen when multiple LSP (Label Switched Path) updates are received in a single PCE (Path Computation Element) message. The LSP update sent by the PCE will not get programmed into the forwarding plane and LSP states will not be updated till the pccd process restarts.
PR NumberSynopsisCategory: Protocol Independant Multicast
1767314
Major		RPD may restart unexpectedly when MSDP peers were reset or closed
Product-Group=junos
Severity=Major		When an MSDP peer is terminated, the peer's information may not be cleaned up properly. Causing the RPD process to restart unexpectedly.
PR NumberSynopsisCategory: KRT Queue issues within RPD
1810622
Major		Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash (CVE-2025-52946)
Product-Group=junos
Severity=Major		A Use After Free vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an attacker sending a BGP update with a specifically malformed AS PATH to cause rpd to crash, resulting in a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA100050 [juniper.net] for more information.
PR NumberSynopsisCategory: RPD route tables, resolver, routing instances, static routes
1834075
Major		Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart (CVE-2025-52955)
Product-Group=junos
Severity=Major		An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a memory corruption that leads to a rpd crash. Please refer to https://supportportal.juniper.net/JSA100062 [juniper.net] for more information.
PR NumberSynopsisCategory: Issues related to control plane security
1779319
Critical		Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash (CVE-2026-21901)
Product-Group=junos
Severity=Critical		A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration parameter to create a Denial of Service (DoS). Please refer to https://supportportal.juniper.net/JSA110072 [juniper.net] for more information.
PR NumberSynopsisCategory: SRX branch platforms
1905219
Critical		The traffic on all interfaces of SRX300/SRX320 platforms are dropped while an interface of them is receiving pause frames from connecting device
Product-Group=junos
Severity=Critical		While an interface of SRX300/SRX320 is receiving pause frames from connecting device, all incoming and outgoing traffic on all interfaces of SRX300/SRX320 was dropped unexpectedly. This issue only occurs when the interface with 'auto-negotiation' disabled receives pause frame. This issue occurs because disabling 'auto-negotiation' causes both 'pause frame' and 'Tx/Rx pause frame' to be set to 'yes'. Connecting device is sending pause frames due to hardware failure.
PR NumberSynopsisCategory: ZT/YT pfe infra issues
1855648
Minor		Junos OS: MX Series: Firewall filters on lo0. in the default routing instance are not in effect (CVE-2026-33774)
Product-Group=junos
Severity=Minor		An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to bypass the configured firewall filter and access the control-plane of the device. Please refer to https://supportportal.juniper.net/JSA107865 [juniper.net] for more information.
PR NumberSynopsisCategory: N/A:sw-trinity-pfe-inline-map:
1912053
Major		Junos OS: MX Series: Specific traffic causes an FPC to reset (CVE-2026-57019)
Product-Group=junos
Severity=Major		An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110079 [juniper.net] for more details.
PR NumberSynopsisCategory: Trio pfe bridging, learning, stp, oam, irb software
1950853
Major		Multicast traffic disruption on VLAN after CoS configuration changes
Product-Group=junos
Severity=Major		On MX platforms , multicast traffic over VLAN interfaces (IRB) will be impacted after certain CoS (Class Of Service) configuration changes. This can result in multicast traffic not reaching downstream receivers.
PR NumberSynopsisCategory: Trio pfe l3 forwarding issues
1902535
Major		Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash (CVE-2026-33800)
Product-Group=junos
Severity=Major		An Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110075 [juniper.net] for more details.
1927194
Major		When a resolution for an IPv4/IPv6 address fails, NH IFL is throttled causing service impact
Product-Group=junos
Severity=Major		In MX uKern and AFT based cards, NH IFL throttling will be seen when resolution for an destination IPv4/IPv6 address fails.
PR NumberSynopsisCategory: Junos Automation, Commit/Op/Event and SLAX
1842247
Critical		Junos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system (CVE-2026-33793)
Product-Group=junos
Severity=Critical		An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system. Please refer to https://supportportal.juniper.net/JSA103142 [juniper.net] for more information.
PR NumberSynopsisCategory: Configuration management, ffp, load action
1860340
Critical		Junos OS and Junos OS Evolved: The Annotate configuration command can be used to change the configuration (CVE-2025-52989)
Product-Group=junos
Severity=Critical		An Improper Neutralization of Delimiters vulnerability in the UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with high privileges to modify the system configuration. Please refer to https://supportportal.juniper.net/JSA100096 [juniper.net] for more information.
PR NumberSynopsisCategory: UI Infrastructure - mgd, DAX API, DDL/ODL
1769911
Major		File copy with password less authentication is failing with rpc request
Product-Group=junos
Severity=Major		On all Junos and Junos OS Evolved platforms , file copy with password less authetication for a non-root user over Netconf is failing with rpc (Remote Procedure Call) request.
1807742
Critical		Junos OS and Junos OS Evolved: A local, low privileged user can access sensitive information (CVE-2025-30654)
Product-Group=junos
Severity=Critical		An Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged, authenticated attacker with access to the CLI to access sensitive information. Please refer to https://supportportal.juniper.net/JSA96464 [juniper.net] for more information.
1821824
Major		The CLI session can be terminated after load override and rollback operations are executed simultaneously
Product-Group=junos
Severity=Major		On all Junos OS and Junos OS Evolved platforms, performing a load override operation simultaneously with a rollback can cause the mgd (management daemon) process to crash. This issue is extremely rare and occurs due to a race condition. There is no impact on traffic forwarding. However, the crash results in the closure of the active CLI (Command Line Interface) session. Access can be restored by re-establishing the session through login.
1840338
Major		Schema.db file gets deleted when maxfile limit is reached on the system
Product-Group=junos
Severity=Major		On all Junos and Junos Evolved platforms, the CLI ( Command Line Interface) /NETCONF session won't start if the schema.db file is deleted when the system reaches the maxfiles limit.
1842518
Major		The device become unresponsive in a race condition due to maximum process (maxproc) limit
Product-Group=junos
Severity=Major		On all Junos/Junos OS Evolved platforms, the device becomes unresponsive due to management (mgd) processes being stuck in a deadlock. This leads to the piling up of mgd processes, which eventually exhausts the maximum process limit (maxproc) on the device. The impact is that the device will become unusable due to the maxproc limit being reached.
1842664
Major		MGD process spike is observed while 'interface-range' in a scaled configuration is deleted.
Product-Group=junos
Severity=Major		On all Junos and Junos OS Evolved platforms, while deleting "interface-range" in scaled configuration is deleted. The mgd (management daemon) process spike is observed, if one process is having more CPU usage then the other processes will be impacted which in turn leads to traffic impact.
PR NumberSynopsisCategory: Issues related to UI management in Logical Systems
1921391
Major		Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command (CVE-2026-33802)
Product-Group=junos
Severity=Major		A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS). Please refer to https://supportportal.juniper.net/JSA110077 [juniper.net] for more details.
PR NumberSynopsisCategory: Issues related to NETCONF
1796297
Major		Error message not prompted on commit confirmed RPC sent in private mode on all Junos and Junos Evolved platforms
Product-Group=junos
Severity=Major		On all Junos and Junos Evolved platforms, commit confirmed command executed with remote procedure call (RPC) in private configuration mode is being allowed where ideally it should not be.
1800859
Minor		Configuration push to device using RPC resulted in incorrect policy order
Product-Group=junos
Severity=Minor		On all Junos and Junos OS Evolved platforms, RPC command with default-operation replace uses load update instead of load override from Junos 21.1 onwards. Policies could get incorrectly reordered impacting traffic, because load update does not honor the replace: tag present in configuration file loaded.
PR NumberSynopsisCategory: Issues related to YANG Data Models
1725934
Major		ODL controller is throwing unavailable capabilities error for few of the Openconfig Yang modules
Product-Group=junos
Severity=Major		ODL controller is throwing unavailable capabilities error for few of the Openconfig Yang modules

 

 

Modification History

First publication 2026-10-14