Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-101980 | critical | 9.8 | No | An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, netwo... | 2026-10-15 |
| CVE-2026-101977 | high | 7.5 | No | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a con... | 2026-10-15 |
| CVE-2026-101973 | high | 7.5 | No | A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cau... | 2026-10-15 |
| CVE-2026-101971 | medium | 6.5 | No | An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and... | 2026-10-15 |
| CVE-2026-101970 | medium | 6.5 | No | A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an un... | 2026-10-15 |
| CVE-2026-101969 | medium | 6.5 | No | An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated ad... | 2026-10-15 |
| CVE-2026-101966 | high | 8.2 | No | A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated... | 2026-10-15 |
| CVE-2026-101960 | medium | 6.5 | No | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX52... | 2026-10-15 |
| CVE-2026-101957 | high | 7.5 | No | An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a rem... | 2026-10-15 |
| CVE-2026-101951 | high | 7.5 | No | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos... | 2026-10-15 |
| CVE-2026-101948 | high | 7.5 | No | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a rem... | 2026-10-15 |
| CVE-2026-101938 | medium | 6.5 | No | An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series al... | 2026-10-15 |
| CVE-2026-101937 | medium | 6.5 | No | A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker... | 2026-10-15 |
| CVE-2026-101936 | medium | 6.5 | No | A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to... | 2026-10-15 |
| CVE-2026-101934 | medium | 4.4 | No | An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial o... | 2026-10-15 |
| CVE-2026-70242 | critical | 9.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70256 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-70257 | high | 8.8 | No | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. | 2026-10-15 |
| CVE-2026-97020 | medium | 6.4 | No | The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and inc... | 2026-10-15 |
| CVE-2026-95807 | medium | 6.4 | No | The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to,... | 2026-10-15 |