CVE-2026-102042 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker to crash the routing process by exploiting RSVP-TE associated bidirectional LSP signaling. The vulnerability impacts multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 score is 6.5, indicating a medium severity with no confidentiality or integrity impact but high impact on availability.
CVE-2026-102041 is a reachable assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent unauthenticated attacker to cause a denial of service by sending malformed RSVP signaling packets when RSVP is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102040 is a NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved. An adjacent unauthenticated attacker can exploit this flaw by sending a crafted RSVP Path message to crash the routing daemon, resulting in a denial of service condition. The vulnerability has a CVSS score of 6.5, indicating medium severity. It affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild, and Juniper has not provided explicit patch links in the available data.
CVE-2026-102039 is a NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can cause a denial of service by sending a malformed RSVP Path message on an EVPL LMP control channel. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 6.5 (medium severity) with no confidentiality or integrity impact, only availability impact.
CVE-2026-102037 is a high-severity XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices. It allows an unauthenticated network attacker to execute arbitrary device configuration commands with root privileges by exploiting a malicious response from a configured custom URL-feed server. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 8.1, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-102036 is an integer overflow or wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured EVPN BGP peer to cause a denial of service by sending crafted EVPN Type-2 MAC/IP routes. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS v3.1 score is 7.5 (high severity), indicating a network attack vector with no privileges required and no user interaction, resulting in denial of service without confidentiality or integrity impact.
CVE-2026-102035 is a reachable assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent attacker to cause a denial of service via an ICCP peer message when MC-LAG IRB MAC synchronization is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 6.5, indicating medium severity. There is no indication of known exploits in the wild. Patch status is not confirmed from the provided data.
CVE-2026-102034 is a reachable assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved. An attacker with access to a configured ICCP peer can send a malformed MC-LAG message to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption. No known exploits are reported in the wild. Juniper has not provided explicit patch links or advisories in the input data, so patch status is not confirmed.
CVE-2026-102033 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved. It involves improper validation of specified quantity in input within the l2ald component, allowing an adjacent attacker to cause a denial of service via an ICCP MC-LAG message. The vulnerability does not impact confidentiality or integrity but affects availability.
CVE-2026-102032 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved involving improper memory release in the l2ald process when the static MAC-IP feature is enabled. An unauthenticated adjacent attacker can exploit this flaw by sending crafted packets to cause a denial of service. The vulnerability does not impact confidentiality or integrity but affects availability. Multiple affected versions across various Junos OS releases are identified. No known exploits are reported in the wild. Patch status is not confirmed from the provided data.
CVE-2026-102031 is a critical OS Command Injection vulnerability in the TACACS component of Juniper Networks Junos OS Evolved. It allows a low-privileged TACACS+-authenticated user to execute commands with root privileges if periodic TACACS+ authorization-refresh is enabled. The vulnerability affects multiple specific versions of Junos OS Evolved. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed.
CVE-2026-102030 is an Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter-region segmented VRF with 'protocols mvpn inter-region-template' is configured. This vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved as specified.
CVE-2026-102029 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion. The vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases.
CVE-2026-102028 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a remote BGP peer to cause a denial of service when multiple UPDATE messages occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured. The vulnerability has a high severity rating with a CVSS score of 7.5.
CVE-2026-102027 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves an incorrect calculation of buffer size (CWE-131) that can be triggered by a configured eBGP neighbor sending BGP labeled-unicast UPDATE messages when certain multipath features are enabled. This vulnerability can cause the rpd process to crash, resulting in denial of service. The issue affects multiple specific version ranges of Junos OS and Junos OS Evolved. No known exploits in the wild have been reported, and no explicit patch links are provided in the input data.
CVE-2026-102026 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It allows an adjacent eBGP peer to cause a routing daemon crash via a BGP route update when RIB sharding is enabled. The vulnerability is categorized as CWE-664, indicating improper control of a resource through its lifetime. It impacts multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 7.5, reflecting a network attack vector with no privileges or user interaction required, causing a denial of service (crash) without confidentiality or integrity impact.
CVE-2026-102025 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves mismatched memory management routines triggered by a BGP route update when extended next-hop tunneling and SRv6 service processing are enabled. This flaw allows an authenticated network-based attacker to cause a denial of service (DoS) condition. The vulnerability does not impact confidentiality or integrity but results in service disruption. Multiple versions of Junos OS and Junos OS Evolved are affected, with no explicit patch information provided in the input data.
CVE-2026-102024 is an integer overflow or wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It affects versions where the extended-nexthop-tunnel feature is enabled. An authenticated BGP peer can exploit this flaw to cause a denial of service by sending crafted BGP route updates. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity. No known exploits are reported in the wild. The affected versions span multiple releases prior to specific patch levels across standard and evolved Junos OS versions.
CVE-2026-102023 is a reachable assertion vulnerability in the fwstatsd component of Juniper Networks Junos OS Evolved. It allows an authenticated network attacker to cause a denial of service by sending a specific SNMP firewall-counter MIB query when at least one firewall counter is configured. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS Evolved are affected, spanning several release branches. No known exploits are reported in the wild, and the product is not a cloud service.
CVE-2026-102022 is a Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An attacker with access to a configured BGP-LS peer can cause the rpd process to crash by sending crafted BGP-LS Link NLRI advertisements. This results in a denial of service condition without impacting confidentiality or integrity. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 7.5, indicating high severity.