CVE-2026-101965
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-134
Impact
Authenticated network attackers can gain root-level code execution, access sensitive information, or crash the telemetry service. They need network access and valid credentials to send crafted messages to the gNMI service.
Root cause
The gRPC daemon improperly processes untrusted input in format string operations.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS Evolved to the fixed releases listed in JSA112250, or disable the gNMI / gRPC telemetry service until patched.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.