CVE-2026-101940

A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.

Score

CVSS 4.0 8.7 High

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-18

Weaknesses

CWE-476

Affected products

• Junos Os (Juniper Networks)
• Junos Os Evolved (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112187