CVE-2026-101970: Junos OS 0 to before 23.2R2-S7.7, 23.4 to before 23.4R2-S8.13, 24.2 to before 24.2R2-S5.5, 24.4 to before 24.4R2-S5…

Affected technology

Junos OS · 0 to before 23.2R2-S7.7, 23.4 to before 23.4R2-S8.13, 24.2 to before 24.2R2-S5.5, 24.4 to before 24.4R2-S5, 25.2 to before 25.2R2-S2, 25.4 to before 25.4R1-S3, 26.2 to before 26.2R1-S2
Juniper Networks

Junos OS Evolved · 0 to before 23.2R2-S7.7-EVO, 23.4 to before 23.4R2-S8.11-EVO, 24.2 to before 24.2R2-S5.6-EVO, 24.4 to before 24.4R2-S5-EVO, 25.2 to before 25.2R2-S2-EVO, 25.4 to before 25.4R1-S3-EVO, 26.2 to before 26.2R1-S2-EVO, 23.4X100, 25.2X100 to before 25.2X100-D35-EVO, 25.4X300 to before 25.4X300-D40-EVO
Juniper Networks

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Adjacent network · No privileges required · No user interaction required

What an attacker can do

The source says a Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash the routing daemon via specific PIM messages when sparse mode PIM is configured. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality and integrity impact as none; availability impact as high.