CVE-2026-102053 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms. It involves improper release of memory before removing the last reference in the l2ald process, which can be triggered by a configured EVPN peer. This flaw allows denial of service through memory exhaustion during EVPN-VXLAN active-active multihoming route processing.
CVE-2026-102052 is a stack-based buffer overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms. It can be triggered by an adjacent unauthenticated attacker via a malformed DHCPv4 server response when the DHCPv4 local-client feature is enabled. Successful exploitation may lead to denial of service or arbitrary code execution with root privileges. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 8.8, indicating high severity.
CVE-2026-102051 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved platforms affecting the l2cpd process. It involves improper release of memory before removing the last reference, which can be triggered by an adjacent unauthenticated attacker via LLDP traffic when fast receive processing is enabled. This can cause memory exhaustion in l2cpd and disrupt Layer 2 control-plane operations.
CVE-2026-102050 is a stack-based buffer overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent attacker to cause a denial of service by sending crafted LLDP packets to an interface configured for LLDP. This can disrupt LLDP and other Layer 2 control protocols on the device. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS v3.1 score is 8.8, indicating high severity.
CVE-2026-102049 is a stack-based buffer overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via LLDP traffic on interfaces with Unified Access Policy enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS 3.1 score is 8.8, indicating high severity.
CVE-2026-102048 is a resource allocation vulnerability in the l2cpd process of Juniper Networks Junos OS. It allows an adjacent unauthenticated attacker to cause denial of service and restart of the l2cpd process via FNP-enabled Layer 2 interfaces. The issue occurs when the FNP feature is enabled on a VPLS routing instance with VLAN-VPLS encapsulation. All Junos OS platforms except PTX and SRX Series are affected.
CVE-2026-102047 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the l2cpd process. It involves improper validation of consistency within input, allowing an adjacent unauthenticated Layer 2 attacker to cause denial of service in Layer 2 control protocols by sending a crafted MVRP Ethernet frame to an MVRP-enabled interface. The vulnerability does not impact confidentiality or integrity but causes availability disruption. No known exploits are reported in the wild. Affected versions span multiple releases prior to specific patch levels.
CVE-2026-102046 is a high-severity vulnerability in Juniper Networks Junos OS affecting MX Series devices. It involves an infinite loop in the netsctp.ko kernel module triggered by crafted SCTP network traffic. This flaw allows an unauthenticated remote attacker to cause a denial of service by making the device enter an unreachable loop state. The vulnerability affects multiple Junos OS versions prior to specific patch releases. No known exploits are reported in the wild as of the publication date.
CVE-2026-102045 is an out-of-bounds write vulnerability in the lacpd component of Juniper Networks Junos OS Evolved. It allows a Layer-2-adjacent attacker to cause a denial of service by sending a crafted frame to an LACP-enabled aggregated-Ethernet member port. The vulnerability affects multiple specific versions of Junos OS Evolved. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-102044 is a Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update. The vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch levels.
CVE-2026-102043 is a numeric truncation error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can exploit this flaw via MPLS-TE fast-reroute signaling to crash the routing process, causing a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5 (medium severity), indicating a significant impact on availability but no confidentiality or integrity loss. No known exploits are reported in the wild, and no official patch information is provided in the input data.
CVE-2026-102042 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker to crash the routing process by exploiting RSVP-TE associated bidirectional LSP signaling. The vulnerability impacts multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 score is 6.5, indicating a medium severity with no confidentiality or integrity impact but high impact on availability.
CVE-2026-102041 is a reachable assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to cause a denial of service by sending malformed RSVP signaling packets when RSVP is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102040 is a NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. An adjacent unauthenticated attacker can exploit this flaw by sending a crafted RSVP Path message to crash the routing daemon, resulting in a denial of service condition. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild, and Juniper has not provided explicit patch links in the available data.
CVE-2026-102039 is a NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can cause a denial of service by sending a malformed RSVP Path message on an EVPL LMP control channel. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 6.5 (medium severity) with no confidentiality or integrity impact, only availability impact.
CVE-2026-102037 is a high-severity XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated network attacker to execute arbitrary device configuration commands with root privileges by exploiting a malicious response from a configured custom URL-feed server. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 8.1, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-102036 is an integer overflow or wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured EVPN BGP peer to cause a denial of service by sending crafted EVPN Type-2 MAC/IP routes. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 score is 7.5 (high severity), indicating a network attack vector with no privileges required and no user interaction, resulting in denial of service without confidentiality or integrity impact.
CVE-2026-102035 is a reachable assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker to cause a denial of service via an ICCP peer message when MC-LAG IRB MAC synchronization is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5, indicating medium severity. There is no indication of known exploits in the wild. Patch status is not confirmed from the provided data.
CVE-2026-102034 is a reachable assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved. An attacker with access to a configured ICCP peer can send a malformed MC-LAG message to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption. No known exploits are reported in the wild. Juniper has not provided explicit patch links or advisories in the input data, so patch status is not confirmed.
CVE-2026-102033 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the l2ald component, allowing an adjacent attacker to cause a denial of service via an ICCP MC-LAG message. The vulnerability does not impact confidentiality or integrity but affects availability.