Juju
Canonical
- Product type
- Other
- Catalog vulnerabilities
- 20
Severity across 11 analyzed records
Verify to analyze this security profile
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 09/14/2026, within CyStack's analyzed data, Juju has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Juju and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-5412Juju CloudSpec API could leak senstive information | Exploitation statusNot known exploited | FixYes | Published04/10/2026 | SeverityCritical |
CVE-2026-5774Juju API Server Denial of Service and Authentication Replay via Unsynchronized Token Map | Exploitation statusPublic exploit | FixYes | Published04/10/2026 | SeverityMedium |
CVE-2025-68153Juju: Resource poisoning | Exploitation statusPublic exploit | FixYes | Published04/03/2026 | SeverityHigh |
CVE-2025-68152Juju: Read All Controller Logs From Compromised Workload | Exploitation statusNot known exploited | FixYes | Published04/03/2026 | SeverityMedium |
CVE-2026-4370Improper TLS Client/Server authentication and certificate verification on Database Cluster | Exploitation statusPublic exploit | FixYes | Published04/01/2026 | SeverityCritical |
CVE-2026-32694Insecure Direct Object Reference attack via predictable secret ID in Juju | Exploitation statusPublic exploit | FixYes | Published03/18/2026 | SeverityMedium |
CVE-2026-32693Unauthorized access to Kubernetes secrets in Juju | Exploitation statusNot known exploited | FixYes | Published03/18/2026 | SeverityHigh |
CVE-2026-32692Unauthorized update of out-of-scope Vault secrets | Exploitation statusNot known exploited | FixYes | Published03/18/2026 | SeverityHigh |
CVE-2026-32691Timing ownership claim attack on new external back-end secrets | Exploitation statusNot known exploited | FixYes | Published03/18/2026 | SeverityMedium |
CVE-2026-1237 | Exploitation statusNot known exploited | FixNo | Published01/28/2026 | SeverityLow |
CVE-2025-0928Arbitrary executable upload via authenticated endpoint | Exploitation statusPublic exploit | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-53513Zip slip vulnerability in Juju | Exploitation statusPublic exploit | FixYes | Published07/08/2025 | SeverityHigh |
CVE-2025-53512Sensitive log retrieval in Juju | Exploitation statusPublic exploit | FixYes | Published07/08/2025 | SeverityMedium |
CVE-2023-0092 | Exploitation statusNot known exploited | FixYes | Published01/31/2025 | SeverityMedium |
CVE-2024-8038 | Exploitation statusNot known exploited | FixYes | Published10/02/2024 | SeverityHigh |
CVE-2024-8037 | Exploitation statusNot known exploited | FixYes | Published10/02/2024 | SeverityMedium |
CVE-2024-7558 | Exploitation statusNot known exploited | FixYes | Published10/02/2024 | SeverityHigh |
CVE-2024-6984 | Exploitation statusNot known exploited | FixYes | Published07/29/2024 | SeverityHigh |
CVE-2015-1316Juju Joyent provider uploads user's private ssh key by default | Exploitation statusNot confirmed | FixYes | Published04/22/2019 | SeverityMedium |
CVE-2017-9232 | Exploitation statusPublic exploit | FixNot confirmed | Published05/28/2017 | SeverityUnknown |
