CVE-2026-101959: CWE-688 Function Call With Incorrect Variable or Reference as Argument in Juniper Networks Junos OS

This vulnerability (CVE-2026-101959) is classified as CWE-688: Function Call With Incorrect Variable or Reference as Argument. It exists in the routing protocol daemon (rpd) component of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated attacker with adjacent network access can cause the rpd to crash by sending malformed LSP-ping messages. The crash leads to denial of service by disrupting routing protocol operations. The vulnerability affects multiple specific version ranges of Junos OS and Junos OS Evolved, including both standard and EVO variants. No known exploits in the wild have been reported, and no vendor patch or advisory details are provided in the input data.

Successful exploitation results in a denial of service condition by crashing the routing protocol daemon (rpd), which can disrupt network routing functions. There is no impact on confidentiality or integrity reported. The attacker requires adjacent network access but no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor Juniper Networks advisories for updates. Until a fix is available, limiting adjacent network access to trusted entities may reduce exposure.