InfoSecBulletin Cybersecurity for mankind
Juniper Networks, a manufacturer of networking equipment, has released patches for over 30 vulnerabilities in Junos OS and Junos OS Evolved. These patches include fixes for nine high-severity vulnerabilities.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has given a November 17, 2023, deadline for federal agencies and organizations to apply mitigations to secure against a naf security flaws in Juniper Junos OS that came to light in August.
Daily Cyber security update for 25. 10. 2026
Daily Cyber security update for 24. 10. 2026
PHP shares new RCE flaw (CVE 2026-115560) with no patch but mitigation
US banks faced unauthorized access by AI agents in customer accounts: Axios reports
Atlassian patched 176 flaw in Jira and Confluence: Fortinet Urges to Patch Flaws Affecting FortiOS, FortiManager
Hacker claim to access Rajasthan Police data: 70,000 records allegedly exposed
Update now! PHP2Shell: Critical PHP vulnerabilities patched
Trump says data centres should pay dividends to local community
Hackers Actively Exploiting Palo Alto VPN Flaw Via CVE-2026-0257
DeepSeek AI banned by U.S. Government; federal agencies must remove all related tools
The agency on Monday added five vulnerabilities to the Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The main issue is a bug in default permissions that lets an unauthorized attacker gain root privileges and create a backdoor on a vulnerable device.
The flaw is tracked as CVE-2023-44194 (CVSS score: 8.4). It occurs due to incorrect permissions associated with a specific system directory.
Juniper’s patches also address six high-severity vulnerabilities in Junos OS and Junos OS Evolved that could lead to denial of service (DoS). Five of these can be exploited remotely, without authentication.
Both Junos OS and Junos OS Evolved are affected by two high-severity issues. These issues can be exploited to impact device stability and the confidentiality and integrity of device operations.
The recent Junos OS and Junos OS Evolved updates fixed several medium-severity vulnerabilities. These flaws could cause DoS conditions, bypass access restrictions, impact system integrity and network connections, affect system availability, leak credentials and configuration changes, and lead to incorrect forwarding of MAC addresses.
Juniper released patches for medium-severity vulnerabilities in third-party software used in Junos OS and Junos OS Evolved. These vulnerabilities include NTP vulnerabilities and cryptographic algorithm issues.
Software updates have been released for Junos OS and Junos OS Evolved versions 20.4, 21.1, 21.2, 21.3, 21.4, 22.1, 22.2, 22.3, 22.4, 23.1, 23.2, and 23.3, fixing vulnerabilities.
Juniper Networks has not detected any malicious attacks exploiting these vulnerabilities.
Apply patches to networking products, including Juniper devices, as soon as possible to prevent exploitation of known vulnerabilities.
Visit Juniper’s support portal for more information.
