CVE-2026-101961

A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP import policy.

Score

CVSS 4.0 8.7 High

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-15

Weaknesses

CWE-476

Affected products

• Junos Os (Juniper Networks)
• Junos Os Evolved (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112187