EUVD-2026-101491

A NULL Pointer Dereference vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with then source-based-forwarding next-hop next-table is configured to...

CVE-2026-101939 Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with then source-based-forwarding next-hop next-table is configured to...

CVE-2026-101988 Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session...

CVE-2026-101988

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An unauthenticated adjacent attacker can cause a denial of service by sending specific LDP messages over an active LDP session. No specific exploit details or r...

EUVD-2026-101482

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session...

CVE-2026-102086 Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

EUVD-2026-101455

A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...

CVE-2026-102086

A NULL Pointer Dereference vulnerability exists in the DNS plugin of Juniper Networks Junos OS on SRX Series devices. The flaw occurs when multiple DNS queries in a single flow session involve both Security Intelligence (SecIntel) feeds and DNS Domain Generation Algorithm (DGA) analysis; an error...

CVE-2026-101948 Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session...

CVE-2026-101948

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . A remote unauthenticated BGP peer can trigger a denial of service (DoS) by sending a specific BGP FlowSpec update received by an affected BGP session when a BGP...

CVE-2026-101977

A NULL Pointer Dereference vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . When ephemeral configuration is utilized, a configured eBGP peer can trigger a persistent routing-daemon denial of service by sending a specific BGP packet. Tec...

EUVD-2026-101442

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...

CVE-2026-101977 Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...

AZL-108399 CVE-2026-110659 affecting package mstflint 4.28.0-1

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

CVE-2026-110659

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...

EUVD-2026-101436

A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment...

Improper exception handling vulnerability in QNAP File Station 5

Versions 5.5.x prior to QNAP File Station 5 5.5.6.5243 contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference; after gaining access to a user account via remote attackers, they can launch denial-of-service attacks...

Getkin Kin-OpenAPI: Improper exception handling leads to vulnerabilities

The getkin kin-openapi versions before 0.136.0 to 0.143.0 have a vulnerability due to improper handling of exceptions. This vulnerability stems from the openapi3filter accepting OpenAPI 3.1 array formats that lack the items keyword. When decoding request bodies, response headers, and other array...

Improper exception handling vulnerability in QNAP File Station 5

Versions 5.5.x prior to QNAP File Station 5 5.5.6.5243 contain an improper exception handling vulnerability. This vulnerability stems from a null pointer dereference, which may allow remote attackers to perform denial-of-service attacks after obtaining a user account...

HPE NonStop SQL/MX Runtime Statistics Input Validation Error Vulnerability

HPE NonStop SQL/MX Run-Time Statistics T1117L40 and earlier versions contain an input validation error vulnerability. This vulnerability stems from memory corruption and null pointer dereferencing, potentially leading to process crashes, denial of service, or information leakage...