Dotkliwość: Wysoka

An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter‑region segmented VRF with 'protocols mvpn inter-region-template' is configured.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via a BGP route update when extended next-hop tunneling and SRv6 service…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to cause an rpd crash via BGP labeled-unicast UPDATEs when the affected multipath features are enabled.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent configured BGP peer to cause a denial of service by sending a specifically malformed BGP MCAST-TREE update and this NLRI…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table <X>` is configured…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arbitrary user accounts through the UsersModalEditEmbed Livewire component. Attackers can dispatch editUser or deleteUser…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and performs synchronous XML parsing. An attacker can trigger unbounded outbound HTTP requests and synchronous parsing,…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to all host interfaces on port 9901. Attackers can request the /config_dump endpoint to read configured LLM provider API…

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Dereferencja wskaźnika NULL w MMS umożliwia atakującemu z sieci zdalne zablokowanie serwera.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Nieautoryzowane ujawnienie informacji w 9Router umożliwia zdalny dostęp do wrażliwych danych użytkowników.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Błąd walidacji w wtyczce TCP proxy Junos OS pozwala na zdalne wywołanie awarii usługi.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki

Błąd walidacji w wtyczce SIP Junos OS umożliwia atakującemu zdalne wywołanie DoS.

CVSS 8,7 · EPSS 0,46 % · rekomendacja wg zapisanej polityki