CVE-2026-101941

HighCVSS 7.5/10Last modified Oct 18, 2026

Description

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Juniper NetworksJunos OS< 23.2R2-S7.7; >= 23.4, < 23.4R2-S8.13; >= 24.2, < 24.2R2-S5.5; >= 24.4, < 24.4R2-S5; >= 25.2, < 25.2R2-S2; >= 25.4, < 25.4R1-S3; >= 26.2, < 26.2R1-S2
Juniper NetworksJunos OS Evolved< 23.2R2-S7.7-EVO; >= 23.4, < 23.4R2-S8.11-EVO; >= 24.2, < 24.2R2-S5.6-EVO; >= 24.4, < 24.4R2-S5-EVO; >= 25.2, < 25.2R2-S2-EVO; >= 25.4, < 25.4R1-S3-EVO; >= 26.2, < 26.2R1-S2-EVO; 23.4X100; >= 25.2X100, < 25.2X100-D35-EVO; >= 25.4X300, < 25.4X300-D40-EVO

References

Timeline

Published
Oct 14, 2026
Last modified
Oct 18, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-1019427.5An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos CVE-2026-1019437.5An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an CVE-2026-1019447.5An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allowCVE-2026-1019457.5An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attackeCVE-2026-1019463.5An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege atCVE-2026-1019478.4ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSCVE-2026-1019487.5A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remCVE-2026-1019497.5A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unCVE-2026-101958.8The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is due to insufficientCVE-2026-1019509.8A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated networkCVE-2026-1019517.5An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and JunosCVE-2026-1019527.5An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos
CVE-2026-101941: High severity, CVSS 7.5 | Vulnix