CVE-2026-102032 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved involving improper memory release in the l2ald process when the static MAC-IP feature is enabled. An unauthenticated adjacent attacker can exploit this flaw by sending crafted packets to cause a denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. Multiple affected versions across various Junos OS releases are identified. No known exploits are reported in the wild. Patch status is not confirmed from the provided data.
CVE-2026-102031 is a critical OS Command Injection vulnerability in the TACACS component of Juniper Networks Junos OS Evolved. It allows a low-privileged TACACS+-authenticated user to execute commands with root privileges if periodic TACACS+ authorization-refresh is enabled. The vulnerability affects multiple specific versions of Junos OS Evolved. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed.
CVE-2026-102030 is an Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter-region segmented VRF with 'protocols mvpn inter-region-template' is configured. This vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved as specified.
CVE-2026-102029 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion. The vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases.
CVE-2026-102028 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote BGP peer to cause a denial of service when multiple UPDATE messages occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-102027 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves an incorrect calculation of buffer size (CWE-131) that can be triggered by a configured eBGP neighbor sending BGP labeled-unicast UPDATE messages when certain multipath features are enabled. This vulnerability can cause the rpd process to crash, resulting in denial of service. The issue affects multiple specific version ranges of Junos OS and Junos OS Evolved. No known exploits in the wild have been reported, and no explicit patch links are provided in the input data.
CVE-2026-102026 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It allows an adjacent eBGP peer to cause a routing daemon crash via a BGP route update when RIB sharding is enabled. The vulnerability is categorized as CWE-664, indicating improper control of a resource through its lifetime. It impacts multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 7.5, reflecting a network attack vector with no privileges or user interaction required, causing a denial of service (crash) without confidentiality or integrity impact.
CVE-2026-102025 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves mismatched memory management routines triggered by a BGP route update when extended next-hop tunneling and SRv6 service processing are enabled. This flaw allows an authenticated network-based attacker to cause a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but results in service disruption. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided in the input data.
CVE-2026-102024 is an integer overflow or wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It affects versions where the extended-nexthop-tunnel feature is enabled. An authenticated BGP peer can exploit this flaw to cause a denial of service by sending crafted BGP route updates. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity. No known exploits are reported in the wild. The affected versions span multiple releases prior to specific patch levels across standard and evolved Junos OS versions.
CVE-2026-102023 is a reachable assertion vulnerability in the fwstatsd component of Juniper Networks Junos OS Evolved. It allows an authenticated network attacker to cause a denial of service by sending a specific SNMP firewall-counter MIB query when at least one firewall counter is configured. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS Evolved are affected, spanning several release branches. No known exploits are reported in the wild, and the product is not a cloud service.
CVE-2026-102022 is a Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An attacker with access to a configured BGP-LS peer can cause the rpd process to crash by sending crafted BGP-LS Link NLRI advertisements. This results in a denial of service condition without impacting confidentiality or integrity. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 7.5, indicating high severity.
CVE-2026-102021 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent network attacker can cause a denial of service by sending a crafted RSVP packet when MPLS-TE RSVP processing is enabled. This results in termination of the rpd process and disruption of routing protocol sessions. The vulnerability has a CVSS score of 6.5, indicating medium severity.
CVE-2026-102020 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An authenticated network-based attacker can exploit this flaw via BGP-LS routing updates to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 score is 7.5, indicating high severity due to the potential for denial of service without confidentiality or integrity impact.
CVE-2026-102019 is a medium severity vulnerability in Juniper Networks Junos OS and Junos Evolved. It involves improper validation of specified quantity in input within the rpd process, allowing an unauthenticated adjacent attacker to cause a denial-of-service (DoS) condition via a malformed RIPv2 message. The vulnerability affects multiple versions of Junos OS and Junos Evolved as specified. There is no explicit vendor advisory or patch information provided in the input data. Exploits are not known to be in the wild at this time.
CVE-2026-102018 is a NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent attacker to cause a denial-of-service (DoS) condition by sending a malformed PIM Bidir message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-102017 is an out-of-bounds write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker to cause a denial of service on the routing plane by sending crafted Auto-RP mapping announcements when Auto-RP mapping is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102016 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the rpd process. It involves improper validation of specified quantity in input related to BGP MVPN signaling updates, allowing a configured BGP MVPN peer to cause a denial of service. The vulnerability does not impact confidentiality or integrity but causes service disruption. Multiple affected version ranges are identified across Junos OS and Junos OS Evolved releases. No known exploits are reported in the wild. No patch links are provided, so patch status is not confirmed.
CVE-2026-102015 is a heap-based buffer overflow vulnerability in the secure-dot1xd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service by sending a crafted EAPOL frame to an 802.1X-authenticated interface. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS 3.1 score is 8.8, indicating high severity.
CVE-2026-102014 is a stack-based buffer overflow vulnerability in the authd process of Juniper Networks Junos OS. An attacker who can influence a configured RADIUS server may cause the authd process to crash or execute code with root privileges by sending a malicious RADIUS response. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-102013 is a NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a crafted network message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 4.4, indicating a medium severity level. There is no indication of known exploits in the wild. The vulnerability does not impact confidentiality or integrity but causes availability disruption.