Known vulnerabilities in Junos OS 25.2R1-S2

Vendor: Juniper Networks, Inc.

Software: Junos OS

Version: 25.2R1-S2

Software CPE: cpe:2.3:o:juniper_networks:juniper_junos_os:*:*:*:*:*:*:*:*

Website: https://www.juniper.net/us/en/

Total vulnerabilities: 7

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU130702 - Command injection CVE-2026-33791	CWE-77	Low	No	No	22.4R3-S8, 23.2R2-S5, 23.4R2-S7, 24.2R2-S2, 24.4R2, 25.2R2, 25.4R1	08.05.2026	SB2026050826
#VU130701 - Missing Authentication for Critical Function CVE-2025-30650	CWE-306	Low	No	No	22.4R3-S8, 23.2R2-S6, 23.4R2-S6, 24.2R2-S3, 24.4R2, 25.2R2, 25.4R1	08.05.2026	SB2026050825
#VU130700 - Improper Check for Unusual or Exceptional Conditions CVE-2026-33787	CWE-754	Low	No	No	23.2R2-S6, 23.4R2-S7, 24.2R2-S2, 24.4R2, 25.2R1-S1, 25.2R2, 25.4R1	08.05.2026	SB2026050822
#VU130699 - Missing release of memory after effective lifetime CVE-2026-33775	CWE-401	Medium	No	No	22.4R3-S8, 23.2R2-S5, 23.4R2-S6, 24.2R2-S2, 24.4R2, 25.2R2, 25.4R1	08.05.2026	SB2026050821
#VU130692 - Improper input validation CVE-2026-33797	CWE-20	Low	No	No	25.2R2, 25.4R1	08.05.2026	SB2026050816
#VU130687 - UNIX Symbolic Link (Symlink) Following CVE-2026-21916	CWE-61	Medium	No	No	23.2R2-S7, 23.4R2-S6, 24.2R2-S3, 24.4R2-S2, 25.2R2	08.05.2026	SB2026050811
#VU125557 - Missing Authorization CVE-2026-33785	CWE-862	Low	No	No	24.4R2-S3, 25.2R2, 25.4R1	09.04.2026	SB2026040941