Mx304
Vendor:
First CVE: Oct 13, 2023 · Active for 2 years
34
Total CVEs
More Total CVEs than 96% of tracked products
8.5
Avg CVEs / Year
Higher CVE frequency than 94% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 32% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mx304 over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 13, 2023
2 years ago
Most Recent CVE
Jul 9, 2026
16 days ago
CVE Severity & Scoring
Mx30434 CVEs
62%
38%
All CVEs352,427 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local6 (17.6%)
Network19 (55.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network9 (26.5%)
Attack Complexity
Low30 (88.2%)
High4 (11.8%)
Unknown0 (0.0%)
User Interaction
None34 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low7 (20.6%)
High0 (0.0%)
None27 (79.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (34 CVEs).
34 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-33785HIGH A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which | Apr 9, 2026 | 8.8 | 30 | NO | NO |
CVE-2026-57019MEDIUM An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjac | Jul 9, 2026 | 6.5 | 29 | NO | NO |
CVE-2026-57054MEDIUM A Use of Incorrectly-Resolved Name or Reference vulnerability in the URL filtering plugin of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacke | Jul 9, 2026 | 5.8 | 26 | NO | NO |
CVE-2026-33778HIGH An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an | Apr 9, 2026 | 7.5 | 26 | NO | NO |
CVE-2026-21918HIGH A Double Free vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX and MX Series allows an unauthenticated, network-based attacker to cause a Den | Jan 15, 2026 | 7.5 | 26 | NO | NO |
CVE-2026-21905HIGH A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the SIP application layer gateway (ALG) of Juniper Networks Junos OS on SRX Series and MX Series with MX-S | Jan 15, 2026 | 7.5 | 26 | NO | NO |
CVE-2026-57025MEDIUM A Return of Pointer Value Outside of Expected Range vulnerability in the fileio library of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privilged attacker to | Jul 9, 2026 | 5.5 | 25 | NO | NO |
CVE-2026-33774MEDIUM An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, net | Apr 9, 2026 | 6.5 | 24 | NO | NO |
CVE-2026-33782MEDIUM A Missing Release of Memory after Effective Lifetime vulnerability in the DHCP daemon (jdhcpd) of Juniper Networks Junos OS on MX Series, allows an adjacent, unauthenticated attack | Apr 9, 2026 | 6.5 | 23 | NO | NO |
CVE-2025-60007MEDIUM A NULL Pointer Dereference vulnerability in the chassis daemon (chassisd) of Juniper Networks Junos OS on MX, SRX and EX Series allows a local attacker with low privileges to cause | Jan 15, 2026 | 5.5 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (34 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (34 CVEs).
Media Mentions
Signals from CVEs in this product scope (34 CVEs).
Top CNAs Publishing CVEs For Mx304
Top CWEs
Versions
No cataloged versions.