Threat Intelligence Database

A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping.

CVE-2026-101982 is a critical stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP/EVPN peer to cause root code execution on Junos OS or trigger an rpd crash on Junos OS Evolved by sending protocol-valid route advertisements for an EVPN-VPWS service. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS score is 9.8, indicating a critical severity with network attack vector, low complexity, no privileges required, and no user interaction needed. No known exploits in the wild have been reported. Patch status is not explicitly stated in the provided data; users should consult Juniper Networks advisories for remediation details.

CVE-2026-101981 is a stack-based buffer overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated adjacent LDP peer to cause a crash or execute arbitrary code by sending a malformed LDP Label Mapping message. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS score is 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.

A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when SNMP and AAA are enabled.

A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic.

An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.

CVE-2026-102023 is a reachable assertion vulnerability in the fwstatsd component of Juniper Networks Junos OS Evolved. It allows an authenticated network attacker to cause a denial of service by sending an SNMP firewall-counter MIB query when at least one firewall counter is configured. The vulnerability has a high severity with a CVSS score of 7.5. Multiple versions of Junos OS Evolved are affected, as specified. There is no explicit patch information provided in the input data.

An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface.

CVE-2026-101944 is an integer overflow or wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. This flaw allows an attacker to cause a denial of service by sending specially crafted EVPN route updates from an accepted EVPN BGP peer. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved prior to specific fixed releases. The CVSS 3.1 score is 7.5, indicating high severity due to the potential for denial of service without requiring privileges or user interaction.

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device. Due to a wrong initialization, a process which should only be able to communicate internally within the device can be reached over the network via an open port. This leads to a device being inadvertently exposed and increased CPU cycles spent processing ingress packets. This issue affects Junos OS Evolved: * All versions before 23.2R2-S7.7-EVO; * 23.4 versions before 23.4R2-S8.11-EVO; * 24.2 versions before 24.2R2-S5.6-EVO; * 24.4 versions before 24.4R2-S4-EVO; * 25.2 version before 25.2R2-S1-EVO; * 25.4 versions before 25.4R1-S1-EVO. Please note that this issue is similar to but not identical CVE-2026-33803.