CVE-2026-102021 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent network attacker can cause a denial of service by sending a crafted RSVP packet when MPLS-TE RSVP processing is enabled. This results in termination of the rpd process and disruption of routing protocol sessions. The vulnerability has a CVSS score of 6.5, indicating medium severity.
CVE-2026-102020 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An authenticated network-based attacker can exploit this flaw via BGP-LS routing updates to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 score is 7.5, indicating high severity due to the potential for denial of service without confidentiality or integrity impact.
CVE-2026-102019 is a medium severity vulnerability in Juniper Networks Junos OS and Junos Evolved. It involves improper validation of specified quantity in input within the rpd process, allowing an unauthenticated adjacent attacker to cause a denial-of-service (DoS) condition via a malformed RIPv2 message. The vulnerability affects multiple versions of Junos OS and Junos Evolved as specified. There is no explicit vendor advisory or patch information provided in the input data. Exploits are not known to be in the wild at this time.
CVE-2026-102018 is a NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent attacker to cause a denial-of-service (DoS) condition by sending a malformed PIM Bidir message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patched releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-102017 is an out-of-bounds write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker to cause a denial of service on the routing plane by sending crafted Auto-RP mapping announcements when Auto-RP mapping is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption.
Lantronix XPress-DR and XPress-DR-I devices running firmware up to version 8.1.0.0 have a missing authentication vulnerability in their UDP configuration protocol on port 30718. This flaw allows remote attackers to read and overwrite device configuration without authentication by sending specially crafted UDP frames. The vulnerability enables attackers to change critical settings such as the device IP address and serial-channel forwarding records, with changes persisting across reboots. The product series reached end-of-life in February 2025.
CVE-2026-102016 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the rpd process. It involves improper validation of specified quantity in input related to BGP MVPN signaling updates, allowing a configured BGP MVPN peer to cause a denial of service. The vulnerability does not impact confidentiality or integrity but causes service disruption. Multiple affected version ranges are identified across Junos OS and Junos OS Evolved releases. No known exploits are reported in the wild. No patch links are provided, so patch status is not confirmed.
CVE-2026-102015 is a heap-based buffer overflow vulnerability in the secure-dot1xd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service by sending a crafted EAPOL frame to an 802.1X-authenticated interface. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS 3.1 score is 8.8, indicating high severity.
CVE-2026-102014 is a stack-based buffer overflow vulnerability in the authd process of Juniper Networks Junos OS. An attacker who can influence a configured RADIUS server may cause the authd process to crash or execute code with root privileges by sending a malicious RADIUS response. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.
CVE-2026-102013 is a NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a crafted network message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 4.4, indicating a medium severity level. There is no indication of known exploits in the wild. The vulnerability does not impact confidentiality or integrity but causes availability disruption.
CVE-2026-102012 is a reachable assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved. This flaw allows a remote unauthenticated attacker to cause a denial of service (DoS) by sending a crafted gRPC telemetry subscription request. The vulnerability affects multiple versions of Junos OS Evolved prior to specific patch releases. The CVSS 3.1 score is 7.5, indicating a high severity impact focused on availability disruption without confidentiality or integrity loss.
CVE-2026-102011 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO. It allows an adjacent attacker to cause a denial of service by exploiting an established LDP session when two misconfigured neighbors or a duplicated neighbor advertise the same transport address on a link-protected interface. The vulnerability affects multiple versions of Junos OS and Junos EVO prior to specific patch releases. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-102000 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO. An adjacent unauthenticated attacker can exploit this vulnerability via LDP control traffic to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos EVO as specified. The CVSS 3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.
CVE-2026-101999 is a reachable assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO. It allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message. The vulnerability has a medium severity with a CVSS score of 6.5 and does not impact confidentiality or integrity but affects availability.
CVE-2026-101971 is a medium severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved platforms affecting the routing protocol daemon (rpd). It allows an unauthenticated adjacent attacker to cause denial of service and heap memory corruption via OSPFv3 messages on an enabled broadcast interface. The vulnerability stems from allocation of resources without limits or throttling. No known exploits are reported in the wild. Multiple versions prior to specific patched releases are affected.
CVE-2026-101970 is a Use After Free vulnerability in the rpd PIM Join/Prune processing component of Juniper Networks Junos OS and Junos OS Evolved platforms. This flaw allows an unauthenticated adjacent attacker to crash the routing daemon by sending specific PIM messages when sparse mode PIM is configured. The vulnerability has a medium severity with a CVSS score of 6.5 and impacts multiple versions of Junos OS and Junos OS Evolved as specified. There is no explicit patch or remediation information provided in the input data.
CVE-2026-101969 is an Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated adjacent attacker can send a malformed PIM Hello message on an IPv6-enabled PIM interface to cause a denial of service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 6.5, indicating a medium severity impact focused on availability disruption.
CVE-2026-101968 is an integer underflow vulnerability in the rpd process of Juniper Networks Junos OS affecting EX Series, MX Series, and Junos OS Evolved on ACX Series platforms that support draft Rosen MVPN. An unauthenticated adjacent attacker can exploit this flaw via a malformed Rosen-MVPN message to cause heap memory disclosure and multicast join-state injection. The vulnerability has a medium severity with a CVSS score of 5.4. Multiple specific Junos OS versions are affected. No explicit patch or remediation status is provided in the available data.
CVE-2026-101946 is an out-of-bounds read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an adjacent low-privilege attacker to disclose limited memory from the rpd process and disrupt an LDP adjacency using an IPv6 LDP message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 3.5, indicating a low severity impact with limited confidentiality impact and no integrity or availability impact.
CVE-2026-101945 is an integer overflow or wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It affects EVPN-enabled routing instances and allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service by disrupting control-plane adjacencies. The vulnerability has a high severity with a CVSS score of 7.5 and impacts multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases.