CVE-2026-102060: CWE-476 NULL Pointer Dereference in Juniper Networks Junos OS

This vulnerability (CVE-2026-102060) involves a NULL Pointer Dereference in the rpd process of Juniper Networks Junos OS running on MX Series and Junos OS Evolved on ACX Series devices. The flaw can be triggered by an unauthenticated attacker on an adjacent network by sending a malicious IGMPv3 membership report, causing the rpd process to crash and resulting in a denial of service condition. The vulnerability affects multiple specific versions of Junos OS and Junos OS Evolved, including both standard and EVO variants, across several release branches. The CVSS 3.1 vector indicates low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Successful exploitation results in a denial of service condition due to the rpd process crashing, which can disrupt routing functionality on affected Juniper devices. There is no impact on confidentiality or integrity. The attack requires adjacency but no authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network administrators should consider limiting exposure of affected devices to untrusted adjacent networks and monitor for unusual IGMPv3 traffic patterns. Do not rely on generic mitigations unless specifically recommended by Juniper Networks.