Is CVE-2025-60011 being actively exploited?

CVE-2025-60011 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2025-60011?

CVE-2025-60011 has a CVSS 3.1 base score of 5.8 (MEDIUM).

CVE-2025-60011

MEDIUM · CVSS 5.8EPSS 0.5%EU EUVD

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause an availability impact for downstream devices. When an affected device receives a specific optional, transitive BGP attribute over an existing BGP session, it will be erroneously modified before propagation to peers. When the attribute is detected as malformed by the peers, these peers will most likely terminate the BGP sessions with the affected devices and thereby cause an availability impact due to the resulting routing churn. This issue affects: Junos OS: * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S5 * 23.4 versions before 23.4R2-S6, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R2; Junos OS Evolved: * all versions before 22.4R3-S8-EVO, * 23.2 versions before 23.2R2-S5-EVO, * 23.4 versions before 23.4R2-S6-EVO, * 24.2 versions before 24.2R2-S2-EVO, * 24.4 versions before 24.4R2-EVO.

Key facts

CVSS score: 5.8 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Weakness (CWE): CWE-754
EPSS score: 0.5% (39th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2026-2713)
Published: January 15, 2026
NVD last modified: June 17, 2026
Status: Analyzed

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2026-2713 in the EU Vulnerability Database. Last updated in EUVD on January 15, 2026.

View on the EU Vulnerability Database

Affected products

juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved
juniper / junos os evolved

and 39 more…

Certified products that may be affected

6 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Juniper SRX Series and vSRX for Junos OS 24.4R1 - Juniper Networks, Inc. - Common Criteria Certificate Number: 2026/163 - active
Junos Space Network Management Platform, with or without Network Director and with or without Security Director in JA2500 - Juniper Networks, Inc. - FIPS 140 3816 - historical
Juniper Networks SRX345/SRX345-DUAL-AC with Junos 15.1X49-D110 - Juniper Networks, Inc. - FIPS 140 3247 - historical
Junos-FIPS 10.4 L2 OS Cryptographic Module - Juniper Networks, Inc. - FIPS 140 1813 - historical
Junos-FIPS 10.4 L1 OS Cryptographic Module - Juniper Networks, Inc. - FIPS 140 1772 - historical

See all 6 in the Security Certifications Explorer.

References

https://kb.juniper.net/JSA103161(Vendor Advisory)
https://supportportal.juniper.net/(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain