CVE-2026-101966: CWE-134 Use of Externally-Controlled Format String in Juniper Networks Junos OS Evolved

This vulnerability (CWE-134) exists in the jti-dialoutd process of Juniper Networks Junos OS Evolved. It allows an authenticated network attacker to trigger a persistent denial of service condition affecting telemetry dial-out by leveraging a format string flaw via a specially crafted analytics sensor resource submitted through the gNMI listener interface. The CVSS 3.1 base score is 8.2, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, low confidentiality impact, no integrity impact, and high availability impact.

Successful exploitation results in persistent denial of service of telemetry dial-out, which can disrupt network monitoring and analytics capabilities. Confidentiality impact is low, and integrity is not affected. The denial of service could impact operational visibility but does not directly compromise system integrity or confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the gNMI listener interface to trusted authenticated users and monitor for unusual telemetry dial-out behavior.