CVE-2026-101971 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved platforms affecting the routing protocol daemon (rpd). It allows an unauthenticated adjacent attacker to cause denial of service and heap memory corruption via OSPFv3 messages on an enabled broadcast interface. The vulnerability stems from allocation of resources without limits or throttling. No known exploits are reported in the wild. Multiple versions prior to specific patched releases are affected.
CVE-2026-101970 is a Use After Free vulnerability in the rpd PIM Join/Prune processing component of Juniper Networks Junos OS and Junos OS Evolved platforms. This flaw allows an unauthenticated adjacent attacker to crash the routing daemon by sending specific PIM messages when sparse mode PIM is configured. The vulnerability has a medium severity with a CVSS score of 6.5 and impacts multiple versions of Junos OS and Junos OS Evolved as specified. There is no explicit patch or remediation information provided in the input data.
CVE-2026-101969 is an Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can send a malformed PIM Hello message on an IPv6-enabled PIM interface to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-101968 is an integer underflow vulnerability in the rpd process of Juniper Networks Junos OS affecting EX Series, MX Series, and Junos OS Evolved on ACX Series platforms that support draft Rosen MVPN. An unauthenticated adjacent attacker can exploit this flaw via a malformed Rosen-MVPN message to cause heap memory disclosure and multicast join-state injection. The vulnerability has a medium severity with a CVSS score of 5.4. Multiple specific Junos OS versions are affected. No explicit patch or remediation status is provided in the available data.
CVE-2026-101946 is an out-of-bounds read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent low-privilege attacker to disclose limited memory from the rpd process and disrupt an LDP adjacency using an IPv6 LDP message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 3.5, indicating a low severity impact with limited confidentiality impact and no integrity or availability impact.
CVE-2026-101945 is an integer overflow or wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It affects EVPN-enabled routing instances and allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service by disrupting control-plane adjacencies. The vulnerability has a high severity with a CVSS score of 7.5 and impacts multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases.
CVE-2026-101944 is an integer overflow or wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This flaw allows an attacker to cause a denial of service by sending specially crafted EVPN route updates from an accepted EVPN BGP peer. The vulnerability has a high severity rating with a CVSS score of 7.5. It affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild, and no official patch links are provided in the input data.
CVE-2026-101943 is an improper input validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated network attacker can send a crafted BGP EVPN update message to cause a denial of service. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 7.5, indicating high severity due to the potential for denial of service without requiring privileges or user interaction.
CVE-2026-101942 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper handling of length parameter inconsistencies in EVPN Type-3 or Type-4 routes. An unauthenticated network attacker can exploit this by sending malformed EVPN routes from a configured EVPN peer, causing a denial of service during route re-advertisement.
CVE-2026-101941 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 7.5, indicating high severity due to the potential for denial of service without requiring privileges or user interaction.
CVE-2026-101940 is a NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled. The vulnerability has a high severity score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. No known exploits are reported in the wild, and no official patch links are provided in the input data.
CVE-2026-101939 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved. It occurs when a configured BGP peer sends an UPDATE that triggers an import policy referencing a non-existent routing table via 'then source-based-forwarding next-hop next-table <X>'. This causes a denial of service by crashing the RPD process. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS and Junos OS Evolved are affected. There is no explicit patch link provided in the data, so patch status is not yet confirmed. No known exploits in the wild have been reported.
CVE-2026-101938 is an integer underflow vulnerability in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. This flaw allows an adjacent unauthenticated attacker to cause a denial of service on the forwarding plane by sending a crafted ICMP message related to an SVR carrier session. The vulnerability has a medium severity with a CVSS score of 6.5 and does not impact confidentiality or integrity but affects availability.
CVE-2026-101937 is a medium severity vulnerability in Juniper Networks Junos OS affecting the SRX Series. It involves a signed to unsigned conversion error in the srxpfe component, which allows an adjacent attacker to cause a denial of service (DoS) of the data plane via chassis-cluster fabric traffic. No confidentiality or integrity impact is reported. The vulnerability affects multiple specific Junos OS versions prior to certain patch releases.
CVE-2026-101936 is a reachable assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series devices. It allows an adjacent network attacker to cause a denial of service (DoS) of the data plane by sending malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces. The vulnerability has a CVSS 3.1 score of 6.5, indicating medium severity. No confidentiality or integrity impact is reported, only availability is affected. Multiple versions of Junos OS prior to specific patch releases are affected.
CVE-2026-101934 is an out-of-bounds write vulnerability in the eventd component of Juniper Networks Junos OS and Junos OS Evolved. A local attacker with high privileges can send a specially crafted packet to the eventd relay service to cause a denial of service (DoS). The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS score is 4.4 (medium severity). Multiple versions of Junos OS and Junos OS Evolved are affected as specified. There is no explicit vendor advisory or patch information provided in the input data.
CVE-2026-101927 is a heap-based buffer overflow vulnerability in the eventd component of Juniper Networks Junos OS and Junos OS Evolved across all platforms. It allows an unprivileged local attacker to cause denial of service or escalate privileges to root by sending crafted IPC event messages. The vulnerability has a high severity with a CVSS score of 7.8. Multiple versions of Junos OS and Junos OS Evolved are affected, including various release trains prior to specific patch releases. No explicit patch links are provided in the data, and no known exploits are reported in the wild.
CVE-2026-101984 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a network-adjacent BGP peer to cause a denial of service when the labeled-unicast aggregate-label feature is configured. The vulnerability has a CVSS score of 6.5, indicating medium severity. No known exploits are reported in the wild. Multiple versions of Junos OS and Junos OS Evolved are affected, with specific version ranges identified. No patch or remediation details are provided in the input data.
CVE-2026-100236 is a high severity vulnerability in the DPDK GSO library used by Red Hat Fast Datapath for RHEL 10. The flaw involves an out-of-bounds read or write triggered when software GSO copies packet headers without verifying that the header fits within the source or destination buffers. This can occur if a header is longer than the configured GSO segment size, causing an underflow in payload-size calculation. The vulnerability can be exploited remotely or by a guest-supplied packet.
CVE-2026-101987 is a vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of a specified quantity in input, which can be triggered by an adjacent attacker sending a crafted IS-IS SRv6 packet when SRv6 and Flexible Algorithm features are enabled. This can cause a denial of service condition.