CVE-2026-101988
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
Published Oct 14, 2026 · updated Oct 15, 2026 · Juniper Networks Junos OS
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · NIST NVD
Detected
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
Oct 14, 2026 · NIST NVD
Updated
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
Oct 15, 2026 · NIST NVD
Updated
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
Affected
- vendor Juniper Networks Junos OSversion unspecified
- vendor Juniper Networks Junos OS Evolvedversion unspecified
Sources
- CIRCL Vulnerability LookupVulnerability recordCVE-2026-101988
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
vulnerability.circl.lu - CVE.orgVulnerability recordCVE-2026-101988
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2026-101988
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2026-101988
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
nvd.nist.gov