CVE-2026-101943
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-20
Impact
An unauthenticated remote attacker can crash the routing protocol daemon (rpd), causing a complete routing denial of service. They only need network access to send a crafted BGP EVPN update message to the device.
Root cause
Improper input validation in the routing protocol daemon (rpd) when parsing BGP EVPN update messages.
Affected systems
Juniper Networks Junos OS and Junos OS Evolved (specific versions not listed — check advisory JSA112187).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the patched Junos OS / Junos OS Evolved releases specified in advisory JSA112187. As an interim workaround, restrict BGP peering to trusted peers using firewall filters or disable untrusted BGP EVPN sessions.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.