{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Juniper Networks Junos OS Evolved: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/juniper-networks--junos-os-evolved/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/juniper-networks--junos-os-evolved/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101954/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101954/",
   "title": "CVE-2026-101954 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to obtain root-level device configuration access and take over the device via a reachable J-Web HTTP or HTTPS service when web management is enabled.",
   "date_published": "2026-10-14T17:22:07Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101952/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101952/",
   "title": "CVE-2026-101952 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or NSR.",
   "date_published": "2026-10-14T17:21:17Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101949/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101949/",
   "title": "CVE-2026-101949 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of service via a VPN-flowspec BGP update if it is readvertised and BMP post-policy RIB-out monitoring is configured.",
   "date_published": "2026-10-14T17:20:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101964/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101964/",
   "title": "CVE-2026-101964 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet received over an established LDP session.",
   "date_published": "2026-10-14T17:20:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101963/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101963/",
   "title": "CVE-2026-101963 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when SRv6 EVPN multihoming is configured.",
   "date_published": "2026-10-14T17:19:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101962/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101962/",
   "title": "CVE-2026-101962 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sending a specifically malformed BGP EVPN multicast update which is attempted to be readvertised to cause an rpd crash.",
   "date_published": "2026-10-14T17:19:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101961/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101961/",
   "title": "CVE-2026-101961 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP import policy.",
   "date_published": "2026-10-14T17:19:09Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101959/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101959/",
   "title": "CVE-2026-101959 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping.",
   "date_published": "2026-10-14T17:18:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101983/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101983/",
   "title": "CVE-2026-101983 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.",
   "date_published": "2026-10-14T17:17:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101982/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101982/",
   "title": "CVE-2026-101982 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd)  of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.",
   "date_published": "2026-10-14T17:17:16Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101981/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101981/",
   "title": "CVE-2026-101981 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message.",
   "date_published": "2026-10-14T17:16:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101979/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101979/",
   "title": "CVE-2026-101979 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root privileges or cause a denial of service via a specific SNMP packet, when SNMP and AAA are enabled.",
   "date_published": "2026-10-14T17:16:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101976/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101976/",
   "title": "CVE-2026-101976 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet-AS capability sending a specifically malformed BGP update to cause a Denial-of-Service (DoS).",
   "date_published": "2026-10-14T17:16:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101975/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101975/",
   "title": "CVE-2026-101975 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-route Prefix-SID installation is configured.",
   "date_published": "2026-10-14T17:15:38Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101972/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101972/",
   "title": "CVE-2026-101972 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via specific OSPFv2 packets sent on an OSPF-enabled interface.",
   "date_published": "2026-10-14T17:15:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-33798/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-33798/",
   "title": "CVE-2026-33798 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary code as root via high-availability fabric traffic.",
   "date_published": "2026-10-14T16:59:34Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-33796/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-33796/",
   "title": "CVE-2026-33796 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.",
   "date_published": "2026-10-14T16:59:22Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-33795/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-33795/",
   "title": "CVE-2026-33795 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised.\n\nThis issue does not affect versions of Junos OS prior to 20.4R1.\nThis issue does not affect versions of Junos OS Evolved prior to 20.4R1-EVO",
   "date_published": "2026-10-14T16:59:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-33789/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-33789/",
   "title": "CVE-2026-33789 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled.",
   "date_published": "2026-10-14T16:58:41Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102185/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102185/",
   "title": "CVE-2026-102185 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election.",
   "date_published": "2026-10-14T16:58:27Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102184/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102184/",
   "title": "CVE-2026-102184 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 structure carried in an EVPN route update. The result is a denial of service affecting routing adjacencies.",
   "date_published": "2026-10-14T16:58:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102183/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102183/",
   "title": "CVE-2026-102183 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause an rpd crash via a specifically malformed NLRI.",
   "date_published": "2026-10-14T16:58:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102180/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102180/",
   "title": "CVE-2026-102180 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP peering session to cause a denial of service by sending a crafted BGP route attribute, which is processed while a BGP RIB streaming telemetry subscription is active.\n\nThis issue does not affect Junos OS versions prior to 22.1R1.\nThis issue does not affect Junos OS Evolved versions prior to 22.1R1-EVO.",
   "date_published": "2026-10-14T16:57:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102179/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102179/",
   "title": "CVE-2026-102179 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN peer to cause a denial of service via BGP EVPN route processing when the l2vpn-evpn RIB telemetry sensor is subscribed. Successful exploitation can crash rpd and interrupt routing protocols until the daemon restarts and reconverges.",
   "date_published": "2026-10-14T16:57:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102178/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102178/",
   "title": "CVE-2026-102178 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled.",
   "date_published": "2026-10-14T16:57:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102177/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102177/",
   "title": "CVE-2026-102177 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service when IS-IS link protection and backup-selection are configured.",
   "date_published": "2026-10-14T16:56:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102175/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102175/",
   "title": "CVE-2026-102175 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can control or intercept the configured SDX/SRC server connection to execute code as root or cause denial of service via a crafted frame received over the service-deployment TCP connection.",
   "date_published": "2026-10-14T16:56:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102061/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102061/",
   "title": "CVE-2026-102061 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message.\n\nThis issue only affects platforms that support Secure-ZTP.",
   "date_published": "2026-10-14T16:55:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102060/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102060/",
   "title": "CVE-2026-102060 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause a denial of service via an IGMPv3 membership report received on a directly connected network.",
   "date_published": "2026-10-14T16:55:43Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102059/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102059/",
   "title": "CVE-2026-102059 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved on EX Series, SRX Series, and QFX Series allows an adjacent unauthenticated attacker to execute arbitrary commands with root privileges via a rogue DHCP server.",
   "date_published": "2026-10-14T16:55:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102058/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102058/",
   "title": "CVE-2026-102058 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic.",
   "date_published": "2026-10-14T16:55:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102056/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102056/",
   "title": "CVE-2026-102056 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent-network attacker to crash the daemon and disclose limited process memory via a specific CFM Message sent to a configured interface.",
   "date_published": "2026-10-14T16:54:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102055/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102055/",
   "title": "CVE-2026-102055 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adjacent-network attacker to execute arbitrary code as root or cause denial of service via a specific CFM Message sent to a configured down-MEP with enhanced CFM mode enabled.",
   "date_published": "2026-10-14T16:54:39Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102054/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102054/",
   "title": "CVE-2026-102054 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP.",
   "date_published": "2026-10-14T16:54:26Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102053/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102053/",
   "title": "CVE-2026-102053 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a configured EVPN peer to cause a denial of service through memory exhaustion via EVPN-VXLAN active-active multihoming route processing.",
   "date_published": "2026-10-14T16:54:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102052/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102052/",
   "title": "CVE-2026-102052 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv4 local-client feature is used.",
   "date_published": "2026-10-14T16:54:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102051/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102051/",
   "title": "CVE-2026-102051 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause l2cpd memory exhaustion and Layer 2 control-plane disruption via LLDP traffic when fast receive processing is enabled.",
   "date_published": "2026-10-14T16:53:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102050/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102050/",
   "title": "CVE-2026-102050 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service in Layer 2 control-plane processing via LLDP packets received on an interface configured for LLDP. Repeated triggering may disrupt LLDP and other Layer 2 control protocols across the device.",
   "date_published": "2026-10-14T16:53:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102049/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102049/",
   "title": "CVE-2026-102049 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service or execute arbitrary code with root privileges via LLDP traffic received on an interface with Unified Access Policy enabled.",
   "date_published": "2026-10-14T16:53:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102047/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102047/",
   "title": "CVE-2026-102047 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 attacker to cause a denial of service in associated Layer 2 control protocols via a crafted MVRP Ethernet frame sent to an MVRP-enabled interface.",
   "date_published": "2026-10-14T16:53:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102045/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102045/",
   "title": "CVE-2026-102045 · Juniper Networks Junos OS Evolved · disclosed",
   "content_text": "An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted frame received on an LACP-enabled aggregated-Ethernet member port.",
   "date_published": "2026-10-14T16:52:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102044/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102044/",
   "title": "CVE-2026-102044 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of service via a BGP-LS update.",
   "date_published": "2026-10-14T16:52:23Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102043/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102043/",
   "title": "CVE-2026-102043 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling.",
   "date_published": "2026-10-14T16:52:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102042/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102042/",
   "title": "CVE-2026-102042 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via RSVP-TE associated-bidirectional LSP signaling.",
   "date_published": "2026-10-14T16:51:59Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102041/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102041/",
   "title": "CVE-2026-102041 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated network attacker to cause a denial of service via malformed RSVP signaling when RSVP is enabled.",
   "date_published": "2026-10-14T16:51:47Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102040/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102040/",
   "title": "CVE-2026-102040 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to crash the routing daemon and cause a denial of service via an RSVP Path message.",
   "date_published": "2026-10-14T16:51:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102039/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102039/",
   "title": "CVE-2026-102039 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via a malformed RSVP Path message received on an EVPL LMP control channel.",
   "date_published": "2026-10-14T16:51:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102036/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102036/",
   "title": "CVE-2026-102036 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes.",
   "date_published": "2026-10-14T16:50:56Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102035/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102035/",
   "title": "CVE-2026-102035 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP peer message when MC-LAG IRB MAC synchronization is enabled.",
   "date_published": "2026-10-14T16:50:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102034/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102034/",
   "title": "CVE-2026-102034 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured ICCP peer to cause a denial of service via a malformed MC-LAG message.",
   "date_published": "2026-10-14T16:50:30Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102033/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102033/",
   "title": "CVE-2026-102033 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP MC-LAG message.",
   "date_published": "2026-10-14T16:50:18Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102032/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102032/",
   "title": "CVE-2026-102032 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via crafted packets when the static MAC-IP feature is in use.",
   "date_published": "2026-10-14T16:50:04Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102031/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102031/",
   "title": "CVE-2026-102031 · Juniper Networks Junos OS Evolved · disclosed",
   "content_text": "An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges when periodic TACACS+ authorization-refresh is enabled.",
   "date_published": "2026-10-14T16:49:50Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102030/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102030/",
   "title": "CVE-2026-102030 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter‑region segmented VRF with 'protocols mvpn inter-region-template' is configured.",
   "date_published": "2026-10-14T16:49:36Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102029/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102029/",
   "title": "CVE-2026-102029 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion.",
   "date_published": "2026-10-14T16:49:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102028/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102028/",
   "title": "CVE-2026-102028 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured.",
   "date_published": "2026-10-14T16:49:05Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102027/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102027/",
   "title": "CVE-2026-102027 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to cause an rpd crash via BGP labeled-unicast UPDATEs when the affected multipath features are enabled.",
   "date_published": "2026-10-14T16:48:00Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102026/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102026/",
   "title": "CVE-2026-102026 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a routing-daemon crash via a BGP route update when RIB sharding is enabled.",
   "date_published": "2026-10-14T16:47:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102025/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102025/",
   "title": "CVE-2026-102025 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via a BGP route update when extended next-hop tunneling and SRv6 service processing are used.",
   "date_published": "2026-10-14T16:47:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102024/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102024/",
   "title": "CVE-2026-102024 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of service via BGP route updates when extended-nexthop-tunnel is enabled.",
   "date_published": "2026-10-14T16:47:24Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102023/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102023/",
   "title": "CVE-2026-102023 · Juniper Networks Junos OS Evolved · disclosed",
   "content_text": "A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-counter MIB query when at least one firewall counter is configured.",
   "date_published": "2026-10-14T16:47:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102022/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102022/",
   "title": "CVE-2026-102022 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements.",
   "date_published": "2026-10-14T16:46:59Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102021/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102021/",
   "title": "CVE-2026-102021 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent network attacker to cause a denial of service via a crafted RSVP packet when MPLS-TE RSVP processing is enabled. The condition can terminate rpd and disrupt routing protocol sessions.",
   "date_published": "2026-10-14T16:46:44Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102020/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102020/",
   "title": "CVE-2026-102020 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service via BGP-LS routing updates.",
   "date_published": "2026-10-14T16:46:31Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102019/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102019/",
   "title": "CVE-2026-102019 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed RIPv2 message.",
   "date_published": "2026-10-14T16:46:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102018/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102018/",
   "title": "CVE-2026-102018 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message.",
   "date_published": "2026-10-14T16:46:07Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102017/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102017/",
   "title": "CVE-2026-102017 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled.",
   "date_published": "2026-10-14T16:45:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102016/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102016/",
   "title": "CVE-2026-102016 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update.",
   "date_published": "2026-10-14T16:45:37Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102015/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102015/",
   "title": "CVE-2026-102015 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface.",
   "date_published": "2026-10-14T16:45:25Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102013/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102013/",
   "title": "CVE-2026-102013 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message.",
   "date_published": "2026-10-14T16:44:59Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102012/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102012/",
   "title": "CVE-2026-102012 · Juniper Networks Junos OS Evolved · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.",
   "date_published": "2026-10-14T16:44:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102011/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102011/",
   "title": "CVE-2026-102011 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors (or one neighbor duplicated by an L2 loop) advertise the same transport address on a link-protected interface.",
   "date_published": "2026-10-14T16:44:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102000/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102000/",
   "title": "CVE-2026-102000 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP control traffic.",
   "date_published": "2026-10-14T16:44:21Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101999/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101999/",
   "title": "CVE-2026-101999 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session carrying an IPv6 Prefix FEC in a specific Label message.",
   "date_published": "2026-10-14T16:44:07Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101971/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101971/",
   "title": "CVE-2026-101971 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service and heap memory corruption via OSPFv3 messages on an enabled broadcast interface.",
   "date_published": "2026-10-14T16:43:52Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101970/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101970/",
   "title": "CVE-2026-101970 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash the routing daemon via specific PIM messages when sparse mode PIM is configured.",
   "date_published": "2026-10-14T16:43:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101969/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101969/",
   "title": "CVE-2026-101969 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via a malformed PIM Hello message received on an IPv6-enabled PIM interface.",
   "date_published": "2026-10-14T16:43:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101968/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101968/",
   "title": "CVE-2026-101968 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker to cause heap memory disclosure and multicast join-state injection via a malformed Rosen-MVPN message.\n\nThis issue only affects platforms that support draft Rosen MVPN, such as the ACX Series, EX Series, and MX Series.",
   "date_published": "2026-10-14T16:43:07Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101946/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101946/",
   "title": "CVE-2026-101946 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process memory and disrupt an LDP adjacency via an IPv6 LDP message.",
   "date_published": "2026-10-14T16:42:54Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101945/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101945/",
   "title": "CVE-2026-101945 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering relationship to cause a denial of service via EVPN BGP route processing. The issue affects EVPN-enabled routing instances and can disrupt control-plane adjacencies.",
   "date_published": "2026-10-14T16:42:42Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101944/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101944/",
   "title": "CVE-2026-101944 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.",
   "date_published": "2026-10-14T16:42:29Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101943/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101943/",
   "title": "CVE-2026-101943 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.",
   "date_published": "2026-10-14T16:42:15Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101942/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101942/",
   "title": "CVE-2026-101942 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a malformed EVPN Type-3 or Type-4 route received from a configured EVPN peer and processed during re-advertisement.",
   "date_published": "2026-10-14T16:42:01Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101941/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101941/",
   "title": "CVE-2026-101941 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled.",
   "date_published": "2026-10-14T16:41:47Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101940/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101940/",
   "title": "CVE-2026-101940 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.",
   "date_published": "2026-10-14T16:41:35Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101939/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101939/",
   "title": "CVE-2026-101939 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table \u003cX\u003e` is configured to reference a routing table that does not exist.",
   "date_published": "2026-10-14T16:41:20Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101938/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101938/",
   "title": "CVE-2026-101938 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacker to cause a forwarding-plane denial of service via an ICMP message associated with an SVR carrier session.",
   "date_published": "2026-10-14T16:41:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101934/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101934/",
   "title": "CVE-2026-101934 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted packet to the eventd relay service.",
   "date_published": "2026-10-14T16:40:13Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101927/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101927/",
   "title": "CVE-2026-101927 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of service (DoS) or achieve privilege escalation to root via crafted IPC event messages.",
   "date_published": "2026-10-14T16:39:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101984/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101984/",
   "title": "CVE-2026-101984 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent BGP peer to cause a denial of service when labeled-unicast aggregate-label is configured.",
   "date_published": "2026-10-14T16:33:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101987/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101987/",
   "title": "CVE-2026-101987 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service by sending a specific IS-IS SRv6 packet when SRv6 and Flexible Algorithm are enabled.",
   "date_published": "2026-10-14T16:33:12Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101988/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101988/",
   "title": "CVE-2026-101988 · Juniper Networks Junos OS · disclosed",
   "content_text": "A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.",
   "date_published": "2026-10-14T16:32:46Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101989/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101989/",
   "title": "CVE-2026-101989 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP neighbor to cause an rpd crash via a crafted LDP message.",
   "date_published": "2026-10-14T16:32:32Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101990/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101990/",
   "title": "CVE-2026-101990 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.",
   "date_published": "2026-10-14T16:31:48Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101992/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101992/",
   "title": "CVE-2026-101992 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an rpd crash via a BGP VPLS signaling update.",
   "date_published": "2026-10-14T16:31:06Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101993/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101993/",
   "title": "CVE-2026-101993 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a denial of service via a VPLS signaling update when automatic site-ID negotiation is enabled.",
   "date_published": "2026-10-14T16:30:49Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101994/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101994/",
   "title": "CVE-2026-101994 · Juniper Networks Junos OS · disclosed",
   "content_text": "An Improper Handling of Length Parameter Inconsistency vulnerability in the \n\nl2ald \n\ndaemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or impersonate a configured MC-LAG ICCP peer to disclose process heap memory or cause a denial of service via a malformed ICCP message.",
   "date_published": "2026-10-14T16:30:33Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-101996/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-101996/",
   "title": "CVE-2026-101996 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the \n\nl2ald \n\ndaemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP allows an adjacent attacker to cause a denial of service via an inconsistent ICCP peer message.",
   "date_published": "2026-10-14T16:30:19Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102064/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102064/",
   "title": "CVE-2026-102064 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer.",
   "date_published": "2026-10-14T16:30:03Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102066/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102066/",
   "title": "CVE-2026-102066 · Juniper Networks Junos OS · disclosed",
   "content_text": "A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of service via a malformed RSVP packet when RSVP is enabled on the receiving interface.",
   "date_published": "2026-10-14T16:29:50Z"
  }
 ]
}