Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-101939

No fix known EPSS <1%CVSS 7.5

A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table <X>` is configured to reference a routing table that does not exist.

Published 2026-10-14 · CVE record · OSV

Products: Juniper Networks Junos OS, Juniper Networks Junos OS Evolved