CVE-2026-101981: CWE-121 Stack-based Buffer Overflow in Juniper Networks Junos OS

This vulnerability is a stack-based buffer overflow (CWE-121) in the rpd component of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent LDP peer can exploit this by sending a malformed LDP Label Mapping message, leading to either a crash of the rpd process or arbitrary code execution. The vulnerability affects a range of versions across multiple releases, including both standard and evolved editions of Junos OS. The CVSS 3.1 vector indicates the attack requires adjacent network access, low complexity, no privileges, and no user interaction, with high impact on confidentiality, integrity, and availability.

Successful exploitation can result in a denial of service (rpd crash) or remote code execution, compromising the confidentiality, integrity, and availability of the affected system. Because the attacker needs to be an adjacent LDP peer, exploitation requires network proximity but no authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the current data. Until a patch is available, restrict access to the LDP protocol from untrusted adjacent peers and monitor network segments for malformed LDP messages to reduce exposure.