CVE-2026-101959
Awaiting Analysis Awaiting Analysis - Queue

Junos OS Routing Protocol Daemon LSP-Ping Crash

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause an rpd crash via specifically malformed LSP-ping.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101959
EUVD
EUVD-2026-101311

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-688 The product calls a function, procedure, or routine, but the caller specifies the wrong variable or reference as one of the arguments, which may lead to undefined behavior and resultant weaknesses.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a function call in Juniper Networks Junos OS and Junos OS Evolved where an incorrect variable or reference is passed as an argument. This can cause the routing protocol daemon (rpd) to crash when processing malformed LSP-ping packets sent by an unauthenticated adjacent attacker.

Detection Guidance

This vulnerability can be detected by monitoring for rpd crashes or unusual LSP-ping traffic. Check Junos OS logs for rpd crashes using 'show log messages | match rpd' and examine LSP-ping traffic with 'show lsp ping extensive'. Ensure your system is updated to the latest patched version.

Impact Analysis

The vulnerability can lead to denial of service by crashing the rpd, disrupting network routing and potentially causing network outages. Since it requires an adjacent attacker, it may affect devices in the same local network segment.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it is a technical flaw in Juniper's routing protocol daemon causing rpd crashes. Compliance risks would arise only if the vulnerability leads to service disruptions or unauthorized access, which is not specified here.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved patches from Juniper Networks to address the vulnerability in the routing protocol daemon (rpd). Monitor for rpd crashes and investigate any unusual activity related to LSP-ping processing.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101959. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart