CVE-2026-101960

An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balancing and more than 128 ecmp next-hops allows an attacker to cause an rpd crash.

Score

CVSS 4.0 7.1 High

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-15

Weaknesses

CWE-787

Affected products

• Junos Os Evolved (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112250