Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Firewalls and NGFW · in CISA KEV

Juniper Networks in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 8 entries for Juniper Networks as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 2, 2025, and the latest federal due date is October 23, 2025.

Updated

entries in the catalog
8
newest addition
October 2, 2025
latest federal due date
October 23, 2025
marked known ransomware use
0

Directory record

Website
www.juniper.net/us/en/security.html
Categories
Firewalls and NGFW (primary), SASE and SSE, Zero trust network access
Headquarters
HQ not established
Founded
Not established
Ownership
Owned by Hewlett Packard Enterprise since 2025
Company record
Juniper Networks on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Juniper”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added October 2, 2025

    CVE-2015-7755 Juniper ScreenOS Improper Authentication Vulnerability

    ScreenOS

    Due October 23, 2025

  2. Added March 13, 2025

    CVE-2025-21590 Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

    Junos OS

    Due April 3, 2025

  3. Added November 13, 2023

    CVE-2023-36851 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    Junos OS

    Due November 17, 2023

  4. Added November 13, 2023

    CVE-2023-36847 Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

    Junos OS

    Due November 17, 2023

  5. Added November 13, 2023

    CVE-2023-36846 Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

    Junos OS

    Due November 17, 2023

  6. Added November 13, 2023

    CVE-2023-36845 Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

    Junos OS

    Due November 17, 2023

  7. Added November 13, 2023

    CVE-2023-36844 Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

    Junos OS

    Due November 17, 2023

  8. Added March 25, 2022

    CVE-2020-1631 Juniper Junos OS Path Traversal Vulnerability

    Junos OS

    Due April 15, 2022

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

  1. Weekly archive · Jul 1 – Jul 7, 2024

    Juniper Networks Patches Denial-of-Service Flaw in Junos OS SRX Series

  2. Weekly archive · Aug 28 – Sep 3, 2023

    Proof-of-Concept Exploit Published for Unauthenticated RCE Chain in Juniper Firewalls

  3. Weekly archive · Aug 21 – Aug 27, 2023

    Juniper patches chainable RCE flaws in firewalls and switches

  4. Weekly archive · Jul 11 – Jul 17, 2022

    Juniper Networks Releases Security Updates for Multiple Products

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Juniper Networks, published November 8, 2026