CVE-2026-101951
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-1288
Impact
A configured BGP peer can crash the routing protocol daemon (rpd), causing a complete denial of service across routing functions. The attacker needs an established BGP session with your router and the ability to send a crafted BGP MCAST-TREE update that your router attempts to readvertise.
Root cause
The rpd process fails to properly validate input consistency when attempting to readvertise received malformed BGP MCAST-TREE NLRI updates.
Affected systems
Juniper Networks Junos OS and Junos OS Evolved; versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the patched Junos OS / Junos OS Evolved releases specified in advisory JSA112187, or tear down or restrict BGP peering sessions carrying MCAST-TREE NLRI from untrusted peers until patched.
$ show versionAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent configured BGP peer to cause a denial of service by sending a specifically malformed BGP MCAST-TREE update and this NLRI is then attempted to be readvertised.