Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-101994

No fix known EPSS <1%CVSS 7.1

An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed ICCP message.

Published 2026-10-14 · CVE record · OSV

Products: Juniper Networks Junos OS, Juniper Networks Junos OS Evolved