目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2026-101990— Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised

一分钟漏洞结论

影响对象
Juniper Networks Junos OS
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update w

CVSS 9.8 · Critical

影响版本矩阵 17

厂商产品 版本范围状态
Juniper Networks Junos OS < 23.2R2-S7.7 affected
23.4< 23.4R2-S8.13 affected
24.2< 24.2R2-S5.5 affected
24.4< 24.4R2-S5 affected
25.2< 25.2R2-S2 affected
25.4< 25.4R1-S3 affected
26.2< 26.2R1-S2 affected
Juniper Networks Junos OS Evolved < 23.2R2-S7.7-EVO affected
23.4< 23.4R2-S8.11-EVO affected
24.2< 24.2R2-S5.6-EVO affected
24.4< 24.4R2-S5-EVO affected
25.2< 25.2R2-S2-EVO affected
25.4< 25.4R1-S3-EVO affected
26.2< 26.2R1-S2-EVO affected
23.4X100 affected
… +2 条更多
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2026-101990 基础信息

漏洞信息

Shenlong is analyzing...

对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
来源: CVE Program / CVE List V5
Vulnerability Description
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
来源: CVE Program / CVE List V5

受影响产品

厂商 产品 影响版本 CPE 订阅
Juniper Networks Junos OS 0 ~ 23.2R2-S7.7 -
Juniper Networks Junos OS Evolved 0 ~ 23.2R2-S7.7-EVO -

二、漏洞 CVE-2026-101990 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2026-101990 的情报信息

请登录查看更多情报信息。

CVE-2026-101990 其他参考 (1)

同批安全公告 · Juniper Networks · 2026-10-14 · 共 153 条

CVE-2026-33789 9.8 CRITICAL Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a speci
CVE-2026-102031 9.8 CRITICAL Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authori
CVE-2026-33792 9.8 CRITICAL Junos OS: SRX Series: An attacker causes remote code execution and denial of service when
CVE-2026-102182 9.8 CRITICAL Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
CVE-2026-102175 9.8 CRITICAL Junos OS and Junos OS Evolved: An attacker causes remote code execution or denial of servi
CVE-2026-101954 9.8 CRITICAL Junos OS and Junos OS Evolved: Unauthenticated network access causes full device takeover
CVE-2026-101983 9.8 CRITICAL Junos OS and Junos OS Evolved: An attacker causes remote code execution when J-Web virtual
CVE-2026-101982 9.8 CRITICAL Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise wh
CVE-2026-33796 9.8 CRITICAL Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP r
CVE-2026-101950 9.8 CRITICAL Junos OS: SRX Series: Malformed IPv4 packets cause packet-forwarding process crash when Se
CVE-2026-102178 9.8 CRITICAL Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malform
CVE-2026-101986 9.8 CRITICAL Junos OS and Junos OS Evolved: J-Web permits pre-authentication CGI execution
CVE-2026-101980 9.8 CRITICAL Junos OS: Malformed Extended Echo requests cause a Routing Engine reboot when Extended Ech
CVE-2026-101956 9.8 CRITICAL Junos OS: Unauthorized root command execution when J-Web is enabled
CVE-2026-102052 8.8 HIGH Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-cl
CVE-2026-102050 8.8 HIGH Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of
CVE-2026-102061 8.8 HIGH Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provi
CVE-2026-102055 8.8 HIGH Junos OS and Junos OS Evolved: MX Series, PTX Series: An attacker causes remote code execu
CVE-2026-102059 8.8 HIGH Junos OS and Junos OS Evolved: EX Series, SRX Series, QFX Series: A rogue DHCP server caus
CVE-2026-102014 8.8 HIGH Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used

显示前 20 条，共 153 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

Same product: Junos OS
Same vendor: Juniper Networks
Same weakness: CWE-121

V. Comments for CVE-2026-101990

暂无评论

发表评论