CVE-2026-101966
8.2HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-134
Impact
Authenticated network attackers can crash and cause persistent denial of service to telemetry dial-out by sending a crafted analytics sensor resource via the gNMI listener. They need network access to the gNMI service and valid credentials.
Root cause
The jti-dialoutd daemon fails to sanitize external inputs used in format string operations.
Affected systems
Juniper Networks Junos OS Evolved; exact versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Fix & remediation
Upgrade to the patched Junos OS Evolved release referenced in JSA112250. If patching must wait, restrict network access to the gNMI listening port using firewall filters or disable gNMI telemetry collection.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.