CVE-2026-92157 is an integer overflow vulnerability in the nasa fprime framework prior to version 4.3.0. The flaw occurs in the Svc::FileDownlink SendPartial range validation, where unchecked arithmetic on startOffset and length can cause a wraparound, leading to inconsistent offset values. This triggers an assertion failure under standard F Prime handling, causing the process to abort or reset and resulting in a denial of service. The issue is resolved in version 4.3.0.
CVE-2026-102058 is a reachable assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms. It allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon through crafted BFD session traffic. The vulnerability has a CVSS v3.1 score of 6.5, indicating medium severity. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided.
CVE-2026-102044 is a Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update. The vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch levels.
CVE-2026-102042 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker to crash the routing process by exploiting RSVP-TE associated bidirectional LSP signaling. The vulnerability impacts multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 score is 6.5, indicating a medium severity with no confidentiality or integrity impact but high impact on availability.
CVE-2026-102041 is a reachable assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to cause a denial of service by sending malformed RSVP signaling packets when RSVP is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102035 is a reachable assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker to cause a denial of service via an ICCP peer message when MC-LAG IRB MAC synchronization is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5, indicating medium severity. There is no indication of known exploits in the wild. Patch status is not confirmed from the provided data.
CVE-2026-102034 is a reachable assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved. An attacker with access to a configured ICCP peer can send a malformed MC-LAG message to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption. No known exploits are reported in the wild. Juniper has not provided explicit patch links or advisories in the input data, so patch status is not confirmed.
CVE-2026-102023 is a reachable assertion vulnerability in the fwstatsd component of Juniper Networks Junos OS Evolved. It allows an authenticated network attacker to cause a denial of service by sending a specific SNMP firewall-counter MIB query when at least one firewall counter is configured. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS Evolved are affected, spanning several release branches. No known exploits are reported in the wild, and the product is not a cloud service.
CVE-2026-102022 is a Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An attacker with access to a configured BGP-LS peer can cause the rpd process to crash by sending crafted BGP-LS Link NLRI advertisements. This results in a denial of service condition without impacting confidentiality or integrity. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 7.5, indicating high severity.
CVE-2026-102020 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An authenticated network-based attacker can exploit this flaw via BGP-LS routing updates to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 score is 7.5, indicating high severity due to the potential for denial of service without confidentiality or integrity impact.
CVE-2026-102012 is a reachable assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved. This flaw allows a remote unauthenticated attacker to cause a denial of service (DoS) by sending a crafted gRPC telemetry subscription request. The vulnerability affects multiple versions of Junos OS Evolved prior to specific patch releases. The CVSS 3.1 score is 7.5, indicating a high severity impact focused on availability disruption without confidentiality or integrity loss.
CVE-2026-102011 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO. It allows an adjacent attacker to cause a denial of service by exploiting an established LDP session when two misconfigured neighbors or a duplicated neighbor advertise the same transport address on a link-protected interface. The vulnerability affects multiple versions of Junos OS and Junos EVO prior to specific patch releases. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102000 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO. An adjacent unauthenticated attacker can exploit this vulnerability via LDP control traffic to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos EVO as specified. The CVSS 3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-101999 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO. It allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message. The vulnerability has a medium severity with a CVSS score of 6.5 and does not impact confidentiality or integrity but affects availability.
CVE-2026-101936 is a reachable assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series devices. It allows an adjacent network attacker to cause a denial of service (DoS) of the data plane by sending malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces. The vulnerability has a CVSS 3.1 score of 6.5, indicating medium severity. No confidentiality or integrity impact is reported, only availability is affected. Multiple versions of Junos OS prior to specific patch releases are affected.
CVE-2026-101984 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a network-adjacent BGP peer to cause a denial of service when the labeled-unicast aggregate-label feature is configured. The vulnerability has a CVSS score of 6.5, indicating medium severity. No known exploits are reported in the wild. Multiple versions of Junos OS and Junos OS Evolved are affected, with specific version ranges identified. No patch or remediation details are provided in the input data.
CVE-2026-101989 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A compromised LDP neighbor can send a crafted LDP message that causes the rpd process to crash. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS 3.1 base score is 6.5, indicating a medium severity impact focused on availability.
CVE-2026-101993 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent eBGP peer to cause a denial of service via a VPLS signaling update when automatic site-ID negotiation is enabled. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved prior to certain patch releases. There are no known exploits in the wild and no vendor advisory or patch information provided in the input data.
CVE-2026-101996 is a reachable assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP. This flaw allows an adjacent attacker to cause a denial of service by sending an inconsistent ICCP peer message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-102064 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker to cause a crash of the rpd process by sending malformed BGP MCAST-VPN updates from a configured eBGP peer. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The vulnerability has a CVSS score of 7.5, indicating high severity due to its potential to cause denial of service via process crash. No known exploits are reported in the wild at this time. Juniper Networks has published this vulnerability but no explicit patch links are provided in the data.