Juniper Junos OS und Junos OS Evolved: Mehrere Schwachstellen
WID-SEC-2026-3976 · first 15.10.2026 · updated 15.10.2026 · CVSS 10,0
What it is about
JUNOS ist das "Juniper Network Operating System", das in Juniper Appliances verwendet wird. Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, erweiterte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und offenzulegen oder Denial-of-Service-Zustände auszulösen.
Under what conditions?
The BSI does not name any particular preconditions. Exploitable remotely according to the BSI.
What can happen in the worst case
An attacker could use the vulnerability to
- beliebigen Programmcode mit Administratorrechten auszuführen
- erweiterte Rechte zu erlangen
- Sicherheitsmaßnahmen zu umgehen
- Daten zu manipulieren
- offenzulegen oder Denial-of-Service-Zustände auszulösen
Am I affected?
Affected according to the BSI:
- Juniper JUNOS OS
- Juniper JUNOS OS Evolved
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Install the updates provided by the vendor; details in the sources below.
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Juniper Patchday October 2026 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112168 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112170 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112171 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112173 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112174 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112176 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112177 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112178 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112180 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112181 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112182 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112186 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112187 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112188 vom 2026-10-14 supportportal.juniper.net
- Juniper Security Bulletin JSA112196 vom 2026-10-14 supportportal.juniper.net
CVE: CVE-2026-101927, CVE-2026-101934, CVE-2026-101936, CVE-2026-101937, CVE-2026-101938, CVE-2026-101939, CVE-2026-101940, CVE-2026-101941, CVE-2026-101942, CVE-2026-101943, CVE-2026-101944, CVE-2026-101945, CVE-2026-101946, CVE-2026-101948, CVE-2026-101949, CVE-2026-101950, CVE-2026-101951, CVE-2026-101952, CVE-2026-101954, CVE-2026-101955 …
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.