Threat Intelligence Database

CVE-2026-101976 is an out-of-bounds write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an eBGP peer that has not negotiated the four-octet-AS capability to send a specially crafted BGP update, causing a denial-of-service (DoS) condition. This vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The vulnerability has a CVSS 3.1 score of 7.5, indicating high severity. No known exploits are reported in the wild. Patch status is not confirmed from the provided data. Users should consult Juniper's official advisories for remediation guidance.

CVE-2026-33798 is a high-severity stack-based buffer overflow vulnerability in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. It allows an L2-adjacent attacker to execute arbitrary code with root privileges via high-availability fabric traffic. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. No known exploits are reported in the wild. The CVSS v3.1 base score is 8.8, indicating a high impact on confidentiality, integrity, and availability.

CVE-2026-33796 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed. There are no known exploits in the wild at this time.

CVE-2026-33789 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated BGP peer to cause denial of service and potentially execute root-level commands by sending crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases. The CVSS score is 9.8, indicating a high severity with network attack vector, no privileges required, and no user interaction needed.

CVE-2026-102183 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves improper validation of specified quantity in input, allowing a configured BGP EVPN peer to cause an rpd crash by sending a specifically malformed NLRI. This vulnerability leads to denial of service due to the crash of the routing daemon. No known exploits are reported in the wild. Multiple versions of Junos OS and Junos OS Evolved prior to specific patch releases are affected.

CVE-2026-102029 is a NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion. The vulnerability has a high severity with a CVSS score of 7.5 and affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases.

CVE-2026-102025 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved affecting the routing protocol daemon (rpd). It involves mismatched memory management routines triggered by BGP route updates when extended next-hop tunneling and SRv6 service processing are enabled. This flaw allows an authenticated network-based attacker to cause a denial of service. No known exploits are reported in the wild. Multiple affected versions span various Junos OS releases prior to specific patch levels.

CVE-2026-102024 is an integer overflow or wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an authenticated BGP peer to cause a denial of service (DoS) via BGP route updates when the extended-nexthop-tunnel feature is enabled. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 7.5, indicating high severity, with the impact limited to availability. No known exploits are reported in the wild, and no official patch links are provided in the data.

CVE-2026-102019 is a medium severity vulnerability in Juniper Networks Junos OS and Junos Evolved affecting the rpd process. It involves improper validation of specified quantity in input, allowing an unauthenticated adjacent attacker to cause a denial-of-service (DoS) via a malformed RIPv2 message. The vulnerability does not impact confidentiality or integrity but can disrupt availability. Multiple versions of Junos OS and Junos Evolved are affected, with no explicit patch information provided in the input data.

CVE-2026-102018 is a NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent attacker to cause a denial-of-service (DoS) condition by sending a malformed PIM Bidir message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS v3.1 base score is 6.5, indicating a medium severity impact focused on availability disruption without confidentiality or integrity impact.