Low severity3.1NVD Advisory· Published Oct 14, 2026
CVE-2026-101991
CVE-2026-101991
Description
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address family enabled.
Affected products
2Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.