CVE-2026-101945 is an integer overflow or wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It affects EVPN-enabled routing instances and allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service by disrupting control-plane adjacencies. The vulnerability has a high severity with a CVSS score of 7.5 and impacts multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases.
CVE-2026-101944 is an integer overflow or wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This flaw allows an attacker to cause a denial of service by sending specially crafted EVPN route updates from an accepted EVPN BGP peer. The vulnerability has a high severity rating with a CVSS score of 7.5. It affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild, and no official patch links are provided in the input data.
CVE-2026-101943 is an improper input validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated network attacker can send a crafted BGP EVPN update message to cause a denial of service. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 7.5, indicating high severity due to the potential for denial of service without requiring privileges or user interaction.
CVE-2026-101942 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper handling of length parameter inconsistencies in EVPN Type-3 or Type-4 routes. An unauthenticated network attacker can exploit this by sending malformed EVPN routes from a configured EVPN peer, causing a denial of service during route re-advertisement.
CVE-2026-101941 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 7.5, indicating high severity due to the potential for denial of service without requiring privileges or user interaction.
CVE-2026-101940 is a NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled. The vulnerability has a high severity score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. No known exploits are reported in the wild, and no official patch links are provided in the input data.
CVE-2026-101939 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved. It occurs when a configured BGP peer sends an UPDATE that triggers an import policy referencing a non-existent routing table via 'then source-based-forwarding next-hop next-table <X>'. This causes a denial of service by crashing the RPD process. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS and Junos OS Evolved are affected. There is no explicit patch link provided in the data, so patch status is not yet confirmed. No known exploits in the wild have been reported.
CVE-2026-101938 is an integer underflow vulnerability in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. This flaw allows an adjacent unauthenticated attacker to cause a denial of service on the forwarding plane by sending a crafted ICMP message related to an SVR carrier session. The vulnerability has a medium severity with a CVSS score of 6.5 and does not impact confidentiality or integrity but affects availability.
CVE-2026-101937 is a medium severity vulnerability in Juniper Networks Junos OS affecting the SRX Series. It involves a signed to unsigned conversion error in the srxpfe component, which allows an adjacent attacker to cause a denial of service (DoS) of the data plane via chassis-cluster fabric traffic. No confidentiality or integrity impact is reported. The vulnerability affects multiple specific Junos OS versions prior to certain patch releases.
CVE-2026-101936 is a reachable assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series devices. It allows an adjacent network attacker to cause a denial of service (DoS) of the data plane by sending malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces. The vulnerability has a CVSS 3.1 score of 6.5, indicating medium severity. No confidentiality or integrity impact is reported, only availability is affected. Multiple versions of Junos OS prior to specific patch releases are affected.
CVE-2026-101934 is an out-of-bounds write vulnerability in the eventd component of Juniper Networks Junos OS and Junos OS Evolved. A local attacker with high privileges can send a specially crafted packet to the eventd relay service to cause a denial of service (DoS). The vulnerability does not impact confidentiality or integrity but affects availability. The CVSS score is 4.4 (medium severity). Multiple versions of Junos OS and Junos OS Evolved are affected as specified. There is no explicit vendor advisory or patch information provided in the input data.
CVE-2026-101927 is a heap-based buffer overflow vulnerability in the eventd component of Juniper Networks Junos OS and Junos OS Evolved across all platforms. It allows an unprivileged local attacker to cause denial of service or escalate privileges to root by sending crafted IPC event messages. The vulnerability has a high severity with a CVSS score of 7.8. Multiple versions of Junos OS and Junos OS Evolved are affected, including various release trains prior to specific patch releases. No explicit patch links are provided in the data, and no known exploits are reported in the wild.
CVE-2026-101984 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a network-adjacent BGP peer to cause a denial of service when the labeled-unicast aggregate-label feature is configured. The vulnerability has a CVSS score of 6.5, indicating medium severity. No known exploits are reported in the wild. Multiple versions of Junos OS and Junos OS Evolved are affected, with specific version ranges identified. No patch or remediation details are provided in the input data.
CVE-2026-101987 is a vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of a specified quantity in input, which can be triggered by an adjacent attacker sending a crafted IS-IS SRv6 packet when SRv6 and Flexible Algorithm features are enabled. This can cause a denial of service condition.
CVE-2026-101988 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can exploit this vulnerability by sending LDP messages over an operational LDP session, causing a denial of service. The vulnerability affects multiple specific versions of Junos OS and Junos OS Evolved. The CVSS v3.1 base score is 6.5, indicating medium severity. There is no indication of known exploits in the wild or vendor-provided patch links in the provided data.
CVE-2026-101989 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A compromised LDP neighbor can send a crafted LDP message that causes the rpd process to crash. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS 3.1 base score is 6.5, indicating a medium severity impact focused on availability.
CVE-2026-101990 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote configured BGP peer to cause an rpd crash or, on Junos OS, remote code execution by sending a specially crafted flow-spec update selected for re-advertisement. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 9.8, indicating a critical severity with network attack vector, low complexity, no privileges required, and impacts confidentiality, integrity, and availability. No known exploits in the wild have been reported. Patch status is not confirmed in the provided data; users should consult Juniper Networks advisories for remediation details.
CVE-2026-101992 is an improper input validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A configured BGP peer can send a BGP VPLS signaling update that causes the rpd process to crash. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The vulnerability has a medium severity with a CVSS score of 6.5 and impacts availability without affecting confidentiality or integrity.
CVE-2026-101993 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent eBGP peer to cause a denial of service via a VPLS signaling update when automatic site-ID negotiation is enabled. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved prior to certain patch releases. There are no known exploits in the wild and no vendor advisory or patch information provided in the input data.
CVE-2026-101994 is a high-severity vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved. It involves improper handling of length parameter inconsistency in MC-LAG ICCP peer communications. An attacker who can control or impersonate a configured MC-LAG ICCP peer may exploit this flaw to disclose process heap memory or cause a denial of service via a malformed ICCP message.