CVE-2026-101961

A NULL Pointer Dereference vulnerability exists in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved . A configured eBGP peer can trigger a routing-daemon (rpd) denial of service by sending a specific BGP packet when a nexthop-ecmp qualifier is attached to ...

CVE-2026-101961 Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when an ECMP qualifier is used in an import policy

A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP...