Juniper patches 60-plus Junos flaws, including root code execution via BMP from a BGP peer
On October 14, 2026, Juniper published JSA112187, its largest bulletin of the year, fixing more than 60 vulnerabilities in Junos OS and Junos OS Evolved, including two flaws that let an unauthenticated BGP peer gain root when BGP Monitoring Protocol is enabled. Check whether BMP is turned on at your network edge and pull J-Web out of public exposure.