Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #7
Juniper Junos OS hit with seven critical unauthenticated vulnerabilities
Original: 🔴 Juniper Junos OS — 7 CVEs, all CVSS 9.8 Unauthenticated: • CVE-2026-102175 — sdxd heap overflow • CVE-2026-101954 — J-
Security researchers are flagging seven critical vulnerabilities in Juniper's Junos OS, all rated CVSS 9.8 and exploitable without authentication. The flaws include a heap overflow in the sdxd service, an auth bypass in J-Web/NETCONF, denial-of-service heap overflows affecting SRX devices, a TACACS privilege escalation from low-privilege access to root, and stack overflows in BGP/EVPN handling. Administrators of Juniper network gear are being urged to patch quickly.
Why now: Network admins and security professionals are urgently warning each other to patch critical flaws that could let unauthenticated attackers take over Juniper devices.
Juniper NetworksJunos OSSRXCVE-2026-102175J-Web
Evidence
- 🔴 Juniper Junos OS — 7 CVEs, all CVSS 9.8 Unauthenticated: • CVE-2026-102175 — sdxd heap overflow • CVE-2026-101954 — J-Web/NETCONF auth bypass • CVE-2026-101950 — SRX SVR heap overflow (DoS) CVE-2026-102031 — TACACS low-priv → root BGP/EVPN stack overflows: 101990, 102178,… · threataft@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/2312223