Analysis Summary

CVE-2025-59958 CVSS:6.5

Juniper Networks Junos OS Evolved could allow a remote attacker to obtain sensitive information or cause a denial of service condition, caused by improper check for unusual or exceptional conditions in the Packet Forwarding Engine (PFE).

CVE-2025-60010 CVSS:5.4

Juniper Networks Junos OS and Junos OS Evolved could allow a remote authenticated attacker to access the device without enforcing the required password change, caused by a password aging flaw in the RADIUS client

Impact

• Information Disclosure
• Security Bypass

Indicators of Compromise

CVE

• CVE-2025-59958

• CVE-2025-60010

Affected Vendors

Remediation

Refer to Juniper Networks Security Advisory for patch, upgrade or suggested workaround information.

CVE-2025-59958

CVE-2025-60010