CVE Vulnerabilities

CVE-2026-101949

NULL Pointer Dereference

Published: Oct 14, 2026 | Modified: Oct 15, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of service via a VPN-flowspec BGP update if it is readvertised and BMP post-policy RIB-out monitoring is configured.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Potential Mitigations

References