Is CVE-2025-59959 being actively exploited?

CVE-2025-59959 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2025-59959?

CVE-2025-59959 has a CVSS 3.1 base score of 5.5 (MEDIUM).

CVE-2025-59959

MEDIUM · CVSS 5.5EPSS 0.1%EU EUVD

An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Service (DoS). When the command 'show route < ( receive-protocol | advertising-protocol ) bgp > detail' is executed, and at least one of the routes in the intended output has specific attributes, this will cause an rpd crash and restart. 'show route ... extensive' is not affected. This issue affects: Junos OS: * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S5, * 23.4 versions before 23.4R2-S5, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R2; Junos OS Evolved: * all versions before 22.4R3-S8-EVO, * 23.2 versions before 23.2R2-S5-EVO, * 23.4 versions before 23.4R2-S6-EVO, * 24.2 versions before 24.2R2-S2-EVO, * 24.4 versions before 24.4R2-EVO.

Key facts

CVSS score: 5.5 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): CWE-822
EPSS score: 0.1% (3th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2026-2705)
Published: January 15, 2026
NVD last modified: June 17, 2026
Status: Analyzed

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2026-2705 in the EU Vulnerability Database. Last updated in EUVD on January 16, 2026.

View on the EU Vulnerability Database

Affected products

juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved

and 38 more…

Certified products that may be affected

6 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Juniper SRX Series and vSRX for Junos OS 24.4R1 - Juniper Networks, Inc. - Common Criteria Certificate Number: 2026/163 - active
Junos Space Network Management Platform, with or without Network Director and with or without Security Director in JA2500 - Juniper Networks, Inc. - FIPS 140 3816 - historical
Juniper Networks SRX345/SRX345-DUAL-AC with Junos 15.1X49-D110 - Juniper Networks, Inc. - FIPS 140 3247 - historical
Junos-FIPS 10.4 L2 OS Cryptographic Module - Juniper Networks, Inc. - FIPS 140 1813 - historical
Junos-FIPS 10.4 L1 OS Cryptographic Module - Juniper Networks, Inc. - FIPS 140 1772 - historical

See all 6 in the Security Certifications Explorer.

References

https://kb.juniper.net/JSA103148(Vendor Advisory)
https://supportportal.juniper.net/(Permissions Required)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain