NULL Pointer Dereference Vulnerability in Juniper Networks Routing Daemon
CVE-2026-102040

7.1HIGH

Key Information:

Vendor: Juniper Networks
Status: Junos Os; Junos Os Evolved
Vendor: CVE Published:; 14 October 2026

🔔 Create Juniper Networks Vulnerability Alert

Badges

👾 Exploit Exists

What is CVE-2026-102040?

A NULL Pointer Dereference vulnerability has been identified in the rpd routing daemon within Juniper Networks' Junos OS and Junos OS Evolved. This flaw allows an adjacent unauthenticated attacker to exploit the routing daemon, potentially leading to a crash and causing a denial of service when they send a malformed RSVP Path message. It is essential for network administrators to be aware of this vulnerability and implement necessary measures to protect their systems.

Affected Version(s)

Junos OS 0 < 23.2R2-S7.7

Junos OS 23.4 < 23.4R2-S8.13

Junos OS 24.2 < 24.2R2-S5.5

References

https://supportportal.juniper.net/JSA112187

vendor-advisory

CVSS V4

Score:

7.1

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

High

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

👾
Exploit known to exist
Oct 14, 2026
Vulnerability published
Oct 14, 2026
Vulnerability Reserved
Sep 28, 2026

CVE-2026-102040 Data

JSON