CVE-2026-101934: CWE-787 Out-of-bounds Write in Juniper Networks Junos OS

This vulnerability (CVE-2026-101934) involves an out-of-bounds write (CWE-787) in the eventd relay service of Juniper Networks Junos OS and Junos OS Evolved. The flaw allows a local attacker with high privileges to cause a denial of service by sending a specially crafted packet to the eventd service. The CVSS 3.1 vector indicates local attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and an availability impact. Affected versions include multiple release trains and specific builds of Junos OS and Junos OS Evolved as explicitly listed. There is no vendor advisory or patch link provided, so patch status is not confirmed.

Successful exploitation results in denial of service (DoS) affecting system availability. There is no impact on confidentiality or integrity. The attack requires local access with high privileges, limiting the attack surface to privileged users on the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users with high privileges to reduce risk. Monitor vendor communications for official patches or mitigations.