CVE-2026-102018

A NULL Pointer Dereference vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . When bidirectional PIM is enabled, an unauthenticated adjacent attacker can exploit this flaw by sending a malformed PIM Bidir DF-Election message , resulting in a denial-of-serv...

EUVD-2026-101333

A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message...

CVE-2026-102013 Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used

A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message...

EUVD-2026-101319

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is...

CVE-2026-101941

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows a configured BGP neighbor to trigger a denial of service (DoS) by sending a BGP route update, specifically when routing-policy resolution-map p...

CVE-2026-101940

A NULL Pointer Dereference vulnerability exists in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved . An unauthenticated configured BGP peer can trigger a denial of service (DoS) by sending a BGP UPDATE message when both ISO-VPN and egress-protection configurations are ena...

CVE-2026-101939 Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with then source-based-forwarding next-hop next-table is configured to...

EUVD-2026-101491

A NULL Pointer Dereference vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with then source-based-forwarding next-hop next-table is configured to...

CVE-2026-101939

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved . The issue occurs when a configured peer sends a BGP UPDATE message while an import policy—specifically using then source-based-forwarding next-hop next-table —r...

CVE-2026-101988

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An unauthenticated adjacent attacker can cause a denial of service by sending specific LDP messages over an active LDP session. No specific exploit details or r...

EUVD-2026-101482

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session...

CVE-2026-101988 Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session...

CVE-2026-102086

A NULL Pointer Dereference vulnerability exists in the DNS plugin of Juniper Networks Junos OS on SRX Series devices. The flaw occurs when multiple DNS queries in a single flow session involve both Security Intelligence (SecIntel) feeds and DNS Domain Generation Algorithm (DGA) analysis; an error...

CVE-2026-102086 Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

EUVD-2026-101455

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

CVE-2026-101948 Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session...

CVE-2026-101948

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . A remote unauthenticated BGP peer can trigger a denial of service (DoS) by sending a specific BGP FlowSpec update received by an affected BGP session when a BGP...

CVE-2026-101977

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . When ephemeral configuration is utilized, a configured eBGP peer can trigger a persistent routing-daemon denial of service by sending a specific BGP packet. Tec...

CVE-2026-101977 Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...

EUVD-2026-101442

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...