https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:15:41 +0000 https://cve.radiocsirt.org/vuln/cve-2026-21908 <p><strong>Affected:</strong> Juniper Networks Junos OS, Juniper Networks Junos OS Evolved</p> <p>A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, network-adjacent attacker flapping a port to crash the dot1xd process, leading to a Denial of Service (DoS), or potentially execute arbitrary code within the context of the process running as root.</p> <p>The issue is specific to the processing of a change in authorization (CoA) when a port bounce occurs. A pointer is freed but was then referenced later in the same code path. Successful exploitation is outside the attacker&#39;s direct control due to the specific timing of the two events required to execute the vulnerable code path.</p> <p>This issue affects systems with 802.1X authentication port-based network access control (PNAC) enabled. This issue affects:</p> <p>Junos OS:</p> <p>* from 23.2R2-S1 before 23.2R2-S5,  * from 23.4R2 before 23.4R2-S6,  * from 24.2 before 24.2R2-S3,  * from 24.4 before 24.4R2-S1,  * from 25.2 before 25.2R1-S2, 25.2R2;</p> <p>Junos OS Evolved:</p> <p>* from 23.2R2-S1 before 23.2R2-S5-EVO,  * from 23.4R2 before 23.4R2-S6-EVO,  * from 24.2 before 24.2R2-S3-EVO,  * from 24.4 before 24.4R2-S1-EVO,  * from 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO.</p> <p><strong>Affected:</strong> Juniper Networks Junos OS, Juniper Networks Junos OS Evolved</p> <p>A Use After Free vulnerability was identified in the 802.1X authentication daemon (dot1xd) of Juniper Networks Junos OS and Junos OS Evolved that could allow an authenticated, network-adjacent attacker flapping a port to crash the dot1xd process, leading to a Denial of Service (DoS), or potentially execute arbitrary code within the context of the process running as root.</p> <p>The issue is specific to the processing of a change in authorization (CoA) when a port bounce occurs. A pointer is freed but was then referenced later in the same code path. Successful exploitation is outside the attacker&#39;s direct control due to the specific timing of the two events required to execute the vulnerable code path.</p> <p>This issue affects systems with 802.1X authentication port-based network access control (PNAC) enabled. This issue affects:</p> <p>Junos OS:</p> <p>* from 23.2R2-S1 before 23.2R2-S5,  * from 23.4R2 before 23.4R2-S6,  * from 24.2 before 24.2R2-S3,  * from 24.4 before 24.4R2-S1,  * from 25.2 before 25.2R1-S2, 25.2R2;</p> <p>Junos OS Evolved:</p> <p>* from 23.2R2-S1 before 23.2R2-S5-EVO,  * from 23.4R2 before 23.4R2-S6-EVO,  * from 24.2 before 24.2R2-S3-EVO,  * from 24.4 before 24.4R2-S1-EVO,  * from 25.2 before 25.2R1-S2-EVO, 25.2R2-EVO.</p> https://cve.radiocsirt.org/vuln/cve-2026-21908