Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-101990

No fix known EPSS <1%CVSS 9.8

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.

Published 2026-10-14 · CVE record · OSV

Products: Juniper Networks Junos OS, Juniper Networks Junos OS Evolved