{"id":"CVE-2026-101966","title":"A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics…","summary":"A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics…","severity":"high","cvss":8.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","cwe":["CWE-134"],"published":"2026-10-14","updated":"2026-10-14","sourceUpdated":"2026-10-14T21:17:23.143","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-101966","references":[{"url":"https://supportportal.juniper.net/JSA112250","label":"sirt@juniper.net"}],"tags":["nvd"],"ingestedAt":"2026-10-14T17:44:53.633Z","slug":"CVE-2026-101966","body":"## Overview\n\nA Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent telemetry dial-out denial of service via a crafted analytics sensor resource submitted through gNMI listener.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":45.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}