CVE-2026-102178

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is...

CVE-2026-102026

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled...

CVE-2026-102017

An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled...

CVE-2026-102020

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates...

CVE-2026-101977

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...

CVE-2026-101943

An Improper Input Validation vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message...

EUVD-2026-101400

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election...

CVE-2026-102178

A Stack-based Buffer Overflow vulnerability exists in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved . When BGP update-threading is enabled, a configured BGP flowspec peer can trigger the vulnerability via flowspec route re-advertisement . This flaw may lead to a routing...

EUVD-2026-101394

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is...

CVE-2026-102178 Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is...

EUVD-2026-101392

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service an...

CVE-2026-102176 Junos OS: Specific packets cause SDK service crash or Routing Engine compromise when the SDK service and JDAF is enabled

A Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network attacker to cause a denial of service or compromise the Routing Engine by sending specific packets when the SDK service an...

CVE-2026-102176

A Buffer Copy without Checking Size of Input (Classic Buffer Overflow ) vulnerability exists in the SDK service process of Juniper Networks Junos OS . An unauthenticated network attacker can trigger a denial of service or compromise the Routing Engine by sending specifically crafted packets. This...

CVE-2026-102043

A Numeric Truncation Error vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows an adjacent attacker to cause a crash of the routing process by utilizing MPLS-TE fast-reroute signaling . The vulnerability leads to a high impact on availabili...

CVE-2026-102043 Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling...

CVE-2026-102040 Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used

A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to crash the routing daemon and cause a denial of service via an RSVP Path message...

CVE-2026-102040

A NULL Pointer Dereference vulnerability exists in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved . An adjacent unauthenticated attacker can crash the routing daemon, resulting in a denial of service (DoS) by sending an RSVP Path message . Exploitation details are not pr...

CVE-2026-102029

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows an unauthenticated configured MSDP peer or an adjacent PIM sender to trigger a denial of service (DoS) . The vulnerability is triggered when an...

CVE-2026-102029 Junos OS and Junos OS Evolved: An attacker causes routing-daemon denial of service when an MSDP or PIM policy uses AS-path expansion

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion...

CVE-2026-102026 Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled...