CVE-2026-101974
CVE-2026-101974
Medium · published October 14, 2026
What it is
An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packets.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- 7.1 · CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
- EPSS
- 0.00250 · 15.4th percentile
- Published
- 2026-10-14T21:17Z
References (1)
EPSS history
Timeline
16 OCT 03:27Z
EPSS moved — → 0%
epss
14 OCT 16:19Z
Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
cvelistv5
14 OCT 16:19Z
Junos OS and Junos OS Evolved: Malformed OSPF packets cause rpd memory disclosure or service disruption when link-local TE processing is used
cvelistv5