NULL Pointer Dereference in Junos OS on MX and ACX Series by Juniper Networks

CVE-2026-102060

What is CVE-2026-102060?

A NULL Pointer Dereference vulnerability exists in the rpd process of Juniper Networks Junos OS, affecting MX Series and ACX Series devices. This flaw can be exploited by an unauthenticated adjacent attacker who sends an IGMPv3 membership report over a directly connected network, potentially leading to a denial of service. It is crucial for users of these devices to review the advisory and apply necessary patches to mitigate exposure.

References