CVE-2026-101927 is a heap-based buffer overflow vulnerability in the eventd component of Juniper Networks Junos OS and Junos OS Evolved across all platforms. It allows an unprivileged local attacker to cause denial of service or escalate privileges to root by sending crafted IPC event messages. The vulnerability has a high severity with a CVSS score of 7.8. Multiple versions of Junos OS and Junos OS Evolved are affected, including various release trains prior to specific patch releases. No explicit patch links are provided in the data, and no known exploits are reported in the wild.
CVE-2026-101984 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a network-adjacent BGP peer to cause a denial of service when the labeled-unicast aggregate-label feature is configured. The vulnerability has a CVSS score of 6.5, indicating medium severity. No known exploits are reported in the wild. Multiple versions of Junos OS and Junos OS Evolved are affected, with specific version ranges identified. No patch or remediation details are provided in the input data.
CVE-2026-101987 is a vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of a specified quantity in input, which can be triggered by an adjacent attacker sending a crafted IS-IS SRv6 packet when SRv6 and Flexible Algorithm features are enabled. This can cause a denial of service condition.
CVE-2026-101988 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can exploit this vulnerability by sending LDP messages over an operational LDP session, causing a denial of service. The vulnerability affects multiple specific versions of Junos OS and Junos OS Evolved. The CVSS v3.1 base score is 6.5, indicating medium severity. There is no indication of known exploits in the wild or vendor-provided patch links in the provided data.
CVE-2026-101989 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A compromised LDP neighbor can send a crafted LDP message that causes the rpd process to crash. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS 3.1 base score is 6.5, indicating a medium severity impact focused on availability.
CVE-2026-101990 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote configured BGP peer to cause an rpd crash or, on Junos OS, remote code execution by sending a specially crafted flow-spec update selected for re-advertisement. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 9.8, indicating a critical severity with network attack vector, low complexity, no privileges required, and impacts confidentiality, integrity, and availability. No known exploits in the wild have been reported. Patch status is not confirmed in the provided data; users should consult Juniper Networks advisories for remediation details.
CVE-2026-101992 is an improper input validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A configured BGP peer can send a BGP VPLS signaling update that causes the rpd process to crash. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The vulnerability has a medium severity with a CVSS score of 6.5 and impacts availability without affecting confidentiality or integrity.
CVE-2026-101993 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent eBGP peer to cause a denial of service via a VPLS signaling update when automatic site-ID negotiation is enabled. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved prior to certain patch releases. There are no known exploits in the wild and no vendor advisory or patch information provided in the input data.
CVE-2026-101994 is a high-severity vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved. It involves improper handling of length parameter inconsistency in MC-LAG ICCP peer communications. An attacker who can control or impersonate a configured MC-LAG ICCP peer may exploit this flaw to disclose process heap memory or cause a denial of service via a malformed ICCP message.
CVE-2026-101996 is a reachable assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP. This flaw allows an adjacent attacker to cause a denial of service by sending an inconsistent ICCP peer message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-102064 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker to cause a crash of the rpd process by sending malformed BGP MCAST-VPN updates from a configured eBGP peer. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The vulnerability has a CVSS score of 7.5, indicating high severity due to its potential to cause denial of service via process crash. No known exploits are reported in the wild at this time. Juniper Networks has published this vulnerability but no explicit patch links are provided in the data.
CVE-2026-102066 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the routing protocol daemon (rpd). An adjacent unauthenticated attacker can cause a denial of service by sending a malformed RSVP packet when RSVP is enabled on the receiving interface.
CVE-2026-102071 is a reachable assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can exploit this vulnerability by sending a specific RSVP packet, causing a denial of service (DoS). The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 6.5, indicating a medium severity level. There is no indication of known exploits in the wild, and no official patch links are provided in the input data.
CVE-2026-101950 is a critical heap-based buffer overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series devices. An unauthenticated network attacker can exploit this vulnerability by sending malformed IPv4 packets to an interface configured for Secure Vector Routing, potentially causing denial of service and compromising confidentiality and integrity.
CVE-2026-101955 is a high-severity stack-based buffer overflow vulnerability in the UTM Anti-Spam SBL feature of Juniper Networks Junos OS on SRX series devices. It allows an unauthenticated remote attacker to cause arbitrary code execution or denial of service by sending a malformed DNS packet when Anti-Spam SBL inspection is enabled.
CVE-2026-101997 is a high-severity SQL Injection vulnerability in the ipfd component of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated network attacker to execute code with root privileges via a configured Security Intelligence feed connection. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 8.1, indicating a significant risk of confidentiality, integrity, and availability impact.
CVE-2026-102062 is a high-severity vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series devices. It involves an externally-controlled format string flaw that allows an unauthenticated network attacker to execute code with root privileges by exploiting a compromised or impersonated HTTPS feed server configuration. The vulnerability affects multiple Junos OS versions prior to specific fixed releases. The CVSS score is 8.1, indicating a significant risk. No known exploits are reported in the wild at this time.
CVE-2026-102078 is a Use After Free vulnerability in the packet forwarding engine of Juniper Networks Junos OS on SRX Series devices. It can be triggered by an unauthenticated, network-based attacker when web filtering for TCP traffic is enabled and a high volume of DNS requests occurs. This causes a race condition that leads to a flowd process crash and restart, resulting in a temporary Denial-of-Service (DoS) until automatic recovery. The vulnerability affects multiple Junos OS versions prior to specific fixed releases. A patch is available to address this issue.
CVE-2026-102079 is an OS command injection vulnerability in the CLI of Juniper Networks Junos OS. A local, low privileged attacker can exploit a flaw in the 'request csds' command, which fails to properly sanitize user input, allowing execution of arbitrary commands with root privileges. This can lead to full system compromise. The vulnerability affects Junos OS versions 24.4 prior to 24.4R2-S4, 25.2 prior to 25.2R2-S1, and 25.4 prior to 25.4R1-S3. Versions before 24.4R1 are not affected. A patch is available to remediate this issue. The CVSS v3.1 base score is 7.8, indicating high severity.
CVE-2026-102080 is an improper resource locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series devices. An unauthenticated, logically adjacent attacker can cause a denial-of-service (DoS) by sending malformed SyncE or PTP messages, triggering false alarms and persistent route engine switchovers. This issue is due to a race condition and affects multiple Junos OS versions prior to specific fixed releases.