Juniper Networks security incident history
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found 8 actively exploited security flaws for Juniper Networks, dated Mar 25, 2022 to Oct 2, 2025. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.
Breach notices and SEC cyber filings
None found in the sources we check.
Got a breach letter from Juniper Networks? What to do when a vendor has a data breach.
Actively exploited security flaws
Flaws in Juniper Networks products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.
-
Juniper ScreenOS Improper Authentication Vulnerability (CVE-2015-7755). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability (CVE-2025-21590). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS EX Series PHP External Variable Modification Vulnerability (CVE-2023-36844). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability (CVE-2023-36845). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability (CVE-2023-36846). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability (CVE-2023-36847). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability (CVE-2023-36851). Added to CISA's list of security flaws known to be exploited by attackers.
-
Juniper Junos OS Path Traversal Vulnerability (CVE-2020-1631). Added to CISA's list of security flaws known to be exploited by attackers.
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works
To cite: Vendor History, "Juniper Networks security incident history," vendorhistory.com/vendor/juniper, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.