CVE-2026-102013: CWE-476 NULL Pointer Dereference in Juniper Networks Junos OS

This vulnerability involves a NULL Pointer Dereference in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker who has access to the chassis-internal network to send a crafted network message that causes the process to crash, resulting in a denial of service condition. The issue affects a broad range of Junos OS versions, including multiple release trains and their evolved variants. The CVSS 3.1 vector indicates local attack vector (AV:L), low attack complexity (AC:L), high privileges required (PR:H), no user interaction (UI:N), unchanged scope (S:U), no confidentiality or integrity impact (C:N/I:N), and high availability impact (A:H).

Successful exploitation results in denial of service by crashing the na-grpcd process, impacting system availability. There is no impact on confidentiality or integrity. The attacker must have access to the chassis-internal network and high privileges, limiting the attack surface. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the chassis-internal network to trusted administrators only to reduce exposure. Monitor vendor communications for updates on patches or mitigations.