CVE-2026-101965
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated
CVSS
8.8
Alto
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 14 oct 2026 · Última mod.: 15 oct 2026 · CWE-134
Sin historial EPSS suficiente todavía.
An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-service disruption, information disclosure, or potential root-level code execution via a crafted message to the gNMI service.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1020628.1 ALT—
——0An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a compromised or impersonated configured HTTPS feed server.4hCVE-2026-1019668.2 ALT—
——0A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.17hCVE-2026-945204.9 MED47.8%
——14Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.2dCVE-2026-858427.8 ALT23.1%
——7Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.2dCVE-2026-835857.8 ALT23.1%
——7Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.2dCVE-2026-767539.8 CRÍ43.1%
——13A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code.7d