CVE-2026-101986 is a critical improper authentication vulnerability in the J-Web interface of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated network attacker to bypass J-Web authentication and execute CGI content with elevated privileges via a crafted HTTP request. The vulnerability affects multiple versions across Junos OS and Junos OS Evolved releases prior to specific fixed versions. The CVSS v3.1 base score is 9.8, indicating a critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.
CVE-2026-101951 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of consistency within input, specifically in handling BGP MCAST-TREE updates. A network-adjacent configured BGP peer can exploit this by sending a specially malformed BGP MCAST-TREE update, causing a denial of service due to attempted readvertisement of the malformed NLRI.
CVE-2026-101957 is an improper initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote BGP peer to cause the rpd process to crash by sending an LLGR-stale route update that is readvertised to a non-LLGR peer group. This vulnerability can lead to denial of service conditions due to rpd crashes.
CVE-2026-102065 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled. This can lead to denial of service by crashing the routing daemon.
CVE-2026-101974 is a vulnerability in the rpd component of Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input, allowing an adjacent OSPF peer to disclose rpd memory or cause a crash via malformed OSPF packets. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved, including specific release ranges and variants. There is no information provided about available patches or vendor advisories. No known exploits in the wild have been reported.
CVE-2026-102067 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). An adjacent unauthenticated attacker can cause a denial of service by sending a crafted RSVP packet when L2 LSP support is enabled.
CVE-2026-101995 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the l2ald daemon. It involves improper validation of specified quantity in input, allowing an adjacent attacker with access to an ICCP peer session to cause memory disclosure and disruption of the l2ald daemon via malformed ICCP packets. The vulnerability does not impact confidentiality or integrity but can cause availability disruption. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided.
CVE-2026-101948 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote unauthenticated BGP peer to cause a denial of service by sending a specific BGP FlowSpec update to an affected BGP session. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 7.5, indicating a high severity denial of service impact without confidentiality or integrity loss.
CVE-2026-101977 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured eBGP peer to cause a persistent denial of service of the routing daemon by sending a specific BGP packet when ephemeral configuration is used. This vulnerability results in a high severity denial of service condition without impacting confidentiality or integrity.
CVE-2026-101956 is a critical improper authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS. It allows an unauthenticated remote attacker to execute arbitrary Junos commands with root privileges via the exposed J-Web interface. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges or user interaction required, and full confidentiality, integrity, and availability impact.
CVE-2026-101980 is a critical integer underflow vulnerability in the kernel of Juniper Networks Junos OS when Extended Echo is configured. An unauthenticated attacker can exploit this vulnerability remotely to cause a denial of service by crashing the kernel. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 9.8, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-102069 is a high-severity stack-based buffer overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices configured as Junos Fusion Aggregation Devices. It can be triggered by an adjacent attacker acting as the configured ICCP peer when dot1x synchronization is enabled for the required Fusion satellite topology. Successful exploitation may cause denial of service and potentially allow execution of code with root privileges.
CVE-2026-102070 is a reachable assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS. This flaw allows an unauthenticated network attacker to disrupt the rmopd service by sending a specific TCP packet. The vulnerability affects multiple versions of Junos OS prior to certain fixed releases. It has a high severity rating with a CVSS score of 7.5, indicating a significant impact on service availability without confidentiality or integrity compromise.
CVE-2026-101973 is a high-severity NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS. It allows an unauthenticated remote attacker to cause a denial of service by sending a malformed packet during CMP enrollment or automatic certificate re-enrollment. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. No known exploits are reported in the wild at this time.
CVE-2026-102072 is a medium severity vulnerability in Juniper Networks Junos OS involving improper handling of highly compressed data in the gRPC library used by na-grpcd. An authenticated network-based attacker can exploit this flaw by sending a specially crafted compressed gRPC request to cause a denial of service (DoS). This vulnerability does not impact confidentiality or integrity but affects availability. Multiple versions of Junos OS prior to specific patch releases are affected. No known exploits are reported in the wild. No explicit patch links are provided in the input data.
CVE-2026-103994 is a heap-based buffer overflow vulnerability in the VXLAN Gateway Daemon (vgd) component of Juniper Networks Junos OS. It allows a malicious or compromised SDN-controller to cause a complete outage of the OVSDB control plane and potentially achieve remote code execution. The vulnerability has a high severity with a CVSS score of 8.8. Multiple versions of Junos OS prior to specific patch releases are affected.
CVE-2026-102063 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS on MX Series routers. It allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF. The vulnerability affects multiple versions of Junos OS prior to specific fixed releases. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-101965 is a high-severity vulnerability in Juniper Networks Junos OS Evolved affecting the gRPC daemon. It involves an externally-controlled format string flaw in the gNMI service that can be exploited by an authenticated network attacker. Successful exploitation may lead to telemetry service disruption, information disclosure, or potentially root-level code execution.
An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to execute commands as root via crafted DHCP response.
CVE-2026-102068 is a high-severity stack-based buffer overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved. It allows an unauthenticated remote attacker to cause a kernel panic by sending a specially crafted TCP packet when key-chain authentication is enabled for BGP or LDP. This vulnerability affects multiple versions of Junos OS Evolved prior to specific patch releases. No known exploits are reported in the wild at this time.