CVE-2026-101985

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS Evolved

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated IS-IS peer to cause a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101985

EUVD

EUVD-2026-101426

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Validation of Specified Quantity in Input issue in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series. It allows an unauthenticated IS-IS peer to cause a denial of service by exploiting improper input validation.

Detection Guidance

This vulnerability involves improper validation in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series. Detection requires monitoring for IS-IS protocol anomalies or crashes in the rpd process. Check for unexpected IS-IS peer disconnections or high CPU usage in the routing daemon. Juniper recommends inspecting logs for rpd crashes or IS-IS adjacency failures.

Impact Analysis

An unauthenticated attacker could exploit this vulnerability to disrupt network services by causing a denial of service, potentially leading to network outages or degraded performance.

Compliance Impact

This vulnerability causes a denial of service due to improper input validation in the routing protocol daemon. It may disrupt network availability, which could impact systems handling sensitive data. Compliance with GDPR or HIPAA often requires maintaining data availability and integrity, so such disruptions could pose risks to meeting regulatory requirements.

Mitigation Strategies

Apply the latest Junos OS Evolved update from Juniper Networks to patch the routing protocol daemon (rpd) vulnerability. Monitor IS-IS peer connections for unusual activity and restrict unauthenticated access to IS-IS peers.

Hi! I’m here to help you understand CVE-2026-101985. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70