EUVD-2026-101396

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP...

CVE-2026-102179 Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed...

EUVD-2026-101395

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed...

CVE-2026-102179

Juniper Networks Junos OS and Junos OS Evolved are affected by an Out-of-bounds Write vulnerability in the routing protocol daemon (rpd ). This vulnerability occurs during BGP EVPN route processing specifically when the l2vpn-evpn RIB telemetry sensor is subscribed. An attacker with access to a c...

EUVD-2026-101394

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is...

CVE-2026-102178

A Stack-based Buffer Overflow vulnerability exists in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved . When BGP update-threading is enabled, a configured BGP flowspec peer can trigger the vulnerability via flowspec route re-advertisement . This flaw may lead to a routing...

EUVD-2026-101393

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured...

CVE-2026-102177

Juniper Networks Junos OS and Junos OS Evolved are affected by an Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) . This flaw occurs when IS-IS link protection and backup-selection are configured, allowing an adjacent unauthenticated attacker to trigger a denial of service ...

CVE-2026-102177 Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used

An Out-of-bounds Write vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured...

EUVD-2026-101392

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service an...

CVE-2026-102175

A Heap-based Buffer Overflow vulnerability exists in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved . A remote unauthenticated attacker capable of controlling or intercepting the configured SDX/SRC server connection can exploit this by sending a crafted frame...

CVE-2026-102175 Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of service when service-deployment processing is used

A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via ...

CVE-2026-96596

A Loop with Unreachable Exit Condition vulnerability exists in the erl_tar module of Erlang OTP stdlib, and within hex_core (hex_erl_tar), Hex (mix_hex_erl_tar), and rebar3 (r3_hex_erl_tar). The issue is caused by erl_tar:do_sparse_read/3 matching a trailing-hole clause for a GNU sparse member be...

CVE-2026-96596 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU...

EUVD-2026-101390

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafted GNU...

EEF-CVE-2026-96596 erl_tar:extract/2 loops forever on a GNU sparse member with a trailing hole

Summary Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Erlang OTP stdlib erltar module, hexpm hexcore hexerltar module, hexpm hex mixhexerltar module and erlang rebar3 r3hexerltar module allows an attacker who supplies a tar archive to cause a denial of service via a crafte...

EUVD-2026-101389

A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to execute code with root privileges or cause denial of service via the remote-access VPN authentication and JIMS...

EUVD-2026-101386

A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received on a directly connected network...

CVE-2026-102060 Junos OS and Junos OS Evolved: MX Series, ACX Series: An attacker causes a routing daemon crash when multicast lawful intercept is used

A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received on a directly connected network...

CVE-2026-102060

A NULL Pointer Dereference vulnerability exists in the rpd process of Juniper Networks Junos OS (MX Series) and Junos OS Evolved (ACX Series). An unauthenticated adjacent attacker can trigger a denial of service (DoS) by sending an IGMPv3 membership report from a directly connected network. No sp...