CVE-2026-101973
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-476
Impact
Remote unauthenticated attackers can crash the Junos OS pkid daemon, causing a denial of service. The attacker only needs network access to send a malformed packet during CMP enrollment or automatic certificate re-enrollment.
Root cause
A NULL pointer dereference in the pkid service when processing malformed packets during certificate enrollment.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Junos OS to the release specified in Juniper advisory JSA112188; as a temporary mitigation, disable CMP enrollment and automatic certificate re-enrollment or restrict network access to the enrollment service.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.