CVE-2026-101946: CWE-125 Out-of-bounds Read in Juniper Networks Junos OS
Description
CVE-2026-101946 is an out-of-bounds read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent low-privilege attacker to disclose limited memory from the rpd process and disrupt an LDP adjacency by sending a crafted IPv6 LDP message. The vulnerability has a low severity with a CVSS score of 3.5. Multiple versions of Junos OS and Junos OS Evolved are affected, with specific version ranges identified. There is no information provided about available patches or vendor advisories. No known exploits are reported in the wild.
CVSS v3.1
Score 3.5low
Affected software
Juniper Networks
Junos OS
Juniper Networks
Junos OS Evolved
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves an out-of-bounds read (CWE-125) in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker with low privileges can exploit this by sending a specially crafted IPv6 LDP message, which results in limited disclosure of rpd process memory and disruption of LDP adjacency. The CVSS 3.1 base score is 3.5, indicating low impact primarily on confidentiality. The affected versions span multiple release trains and specific sub-versions of Junos OS and Junos OS Evolved as detailed in the affectedVersions field. No vendor patch or remediation information is provided in the input data.
Potential Impact
The vulnerability allows limited disclosure of memory from the rpd process and disruption of LDP adjacency. The impact is limited to confidentiality loss and service disruption without integrity or availability compromise beyond adjacency disruption. The CVSS score of 3.5 reflects a low severity impact with attack vector being adjacent network access and requiring low privileges.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the input data. Users should monitor Juniper Networks advisories for updates and apply patches or mitigations once available.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- juniper
- Date Reserved
- 2026-09-28T16:22:33.605Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acfb6702cdf04f656979501
Added to database: 10/14/2026, 17:05:52 UTC
Last enriched: 10/14/2026, 17:34:32 UTC
Last updated: 10/14/2026, 19:48:34 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.