CVE-2026-101981
8.8HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
Adjacent unauthenticated attackers can execute arbitrary code or crash the routing daemon (rpd) on the device. They only need adjacent network access to send a malformed LDP Label Mapping message.
Root cause
A stack-based buffer overflow in the routing protocol daemon (rpd) mishandles malformed LDP Label Mapping messages.
Affected systems
Juniper Networks Junos OS and Junos OS Evolved (specific versions not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to the patched Junos OS / Junos OS Evolved release specified in Juniper advisory JSA112187. If patching must wait, disable LDP or restrict LDP peering to trusted neighbors using firewall filters.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to cause an rpd crash or execute arbitrary code via a malformed LDP Label Mapping message.