CVE-2026-101965

Awaiting Analysis Awaiting Analysis - Queue

Use of Externally-Controlled Format String in Juniper Junos OS Evolved gRPC Daemon

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Juniper Networks, Inc.

Description

An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101965

EUVD

EUVD-2026-101432

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-134	The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Attack-Flow Graph

Executive Summary

This vulnerability is a Use of Externally-Controlled Format String issue in the gRPC daemon of Juniper Networks Junos OS Evolved. An authenticated network attacker can exploit it by sending a specially crafted message to the gNMI service, potentially causing telemetry-service disruption, information disclosure, or even root-level code execution.

Detection Guidance

Detection requires monitoring gRPC daemon logs for malformed gNMI service messages. Check for crashes or unexpected telemetry service disruptions. Juniper recommends inspecting gRPC daemon logs for format string anomalies in gNMI service interactions.

Impact Analysis

If exploited, this vulnerability could lead to service disruptions, unauthorized access to sensitive information, or complete system compromise with root-level privileges. This may affect network operations, data confidentiality, and system integrity.

Compliance Impact

The vulnerability allows authenticated attackers to cause telemetry-service disruption, information disclosure, or root-level code execution via crafted messages. This could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's confidentiality rules.

Mitigation Strategies

Apply the latest security patches from Juniper Networks for Junos OS Evolved to address the gRPC daemon vulnerability. Disable the gNMI service if not required and restrict access to trusted networks only.

Hi! I’m here to help you understand CVE-2026-101965. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70