CVE-2026-101940 Juniper Networks CVE debrief

Who should care

Network administrators and security teams responsible for Juniper Networks Junos OS and Junos OS Evolved systems should assess exposure and prioritize patching or mitigation to prevent potential denial-of-service attacks. They should review and apply patches from Juniper Networks, verify BGP ISO-VPN egress protection configuration, and monitor for suspicious BGP UPDATE activity.

Why it matters

CVE-2026-101940 is a NULL Pointer Dereference vulnerability in Junos OS and Junos OS Evolved that allows an unauthenticated configured BGP peer to cause a denial of service. Network administrators and security teams should assess exposure and prioritize patching or mitigation to prevent potential denial-of-service attacks.

• Potential denial-of-service attacks via BGP UPDATE
• Verification of BGP ISO-VPN egress protection configuration required
• Patching or mitigation prioritization for network administrators

Technical summary

A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled. The vulnerability can be triggered by a BGP UPDATE message, which can cause a routing-daemon crash. This can lead to potential denial-of-service attacks. To mitigate this vulnerability, network administrators should prioritize patching or mitigating this vulnerability.

Defensive priority

Network administrators should prioritize patching or mitigating this vulnerability to prevent potential denial-of-service attacks.

Recommended defensive actions

• Review and apply patches from Juniper Networks
• Verify BGP ISO-VPN egress protection configuration
• Monitor for suspicious BGP UPDATE activity
• Perform vulnerability assessment to identify potential exposure
• Implement compensating controls for exposed systems
• Review asset inventory for affected systems
• Track exceptions and retest remediated assets

Evidence notes

The CVE Program record and NVD vulnerability detail page provide official information about the vulnerability. The Juniper Networks support portal also provides additional information about the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.