PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-101974 Juniper Networks CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T16:19:41.668Z and has not been modified since then. CVE-2026-101974 is a vulnerability in Junos OS and Junos OS Evolved that allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packet when link-local TE processing is used. Network administrators and security teams should assess exposure and prioritize verification of OSPF link-local TE processing configurations. The vulnerability has a CVSS score of 6.5 and is considered medium severity.

Vendor
Juniper Networks
Product
Junos OS
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Network administrators and security teams responsible for Junos OS and Junos OS Evolved configurations should assess exposure and prioritize verification of OSPF link-local TE processing configurations.

Why it matters

CVE-2026-101974 is a vulnerability in Junos OS and Junos OS Evolved that allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packet when link-local TE processing is used. Network administrators and security teams should assess exposure and prioritize verification of OSPF link-local TE processing configurations. The vulnerability has a CVSS score of 6.5 and is considered medium severity.

  • Memory disclosure or service disruption via malformed OSPF packets
  • Potential for rpd crash or memory disclosure when link-local TE processing is used
  • Verification of OSPF link-local TE processing configurations required
  • Patching or updating Junos OS and Junos OS Evolved versions may be necessary

Technical summary

A vulnerability in Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or cause a rpd crash via a malformed OSPF packet when link-local TE processing is used. The vulnerability is caused by improper validation of specified quantity in input, allowing an attacker to exploit this vulnerability by sending malformed OSPF packets. Network administrators and security teams should assess exposure and prioritize verification of OSPF link-local TE processing configurations.

Defensive priority

Network administrators and security teams should assess exposure and prioritize verification of OSPF link-local TE processing configurations.

Recommended defensive actions

  • Review OSPF link-local TE processing configurations for potential exposure
  • Verify Junos OS and Junos OS Evolved versions against affected versions
  • Apply vendor-provided patches or updates as available

Evidence notes

The CVE record and source item provide details on the vulnerability in Junos OS and Junos OS Evolved, but specific exploitation or impact details are limited.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-101974 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-101974

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-101974 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-101974

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.