CVE-2026-101974: 1284 in Juniper Networks Junos OS
Description
An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets.
CVSS v3.1
Score 6.5medium
Affected software
Juniper Networks
Junos OS
Juniper Networks
Junos OS Evolved
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-101974) affects the rpd daemon in Juniper Networks Junos OS and Junos OS Evolved. It is caused by improper validation of a specified quantity in input, which allows an adjacent OSPF peer to send malformed OSPF packets that can disclose rpd memory or cause the rpd process to crash. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with an attack vector of adjacent network, low attack complexity, no privileges required, no user interaction, and impacts availability only. The affected versions span multiple release trains and include both standard and evolved OS variants.
Potential Impact
An adjacent OSPF peer can exploit this vulnerability to cause a denial of service by crashing the rpd process or potentially disclose rpd memory. There is no impact on confidentiality or integrity. The denial of service could affect routing stability on the affected device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided in the available data. Users should monitor Juniper Networks advisories for patches or mitigations addressing this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- juniper
- Date Reserved
- 2026-09-28T16:31:35.503Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6acfaf302cdf04f65694d330
Added to database: 10/14/2026, 16:34:56 UTC
Last enriched: 10/14/2026, 18:49:07 UTC
Last updated: 10/15/2026, 00:48:44 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.