CVE-2026-101952
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- —
Impact
A configured BGP ISO-VPN peer can crash the routing protocol daemon (rpd), causing a denial of service. The attacker needs an established BGP peering session where ISO-VPN updates are sent and processed by BMP route monitoring or NSR.
Root cause
The routing protocol daemon fails to properly validate consistency within specific ISO-VPN input updates when handling them via BMP route monitoring or NSR.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to the fixed Junos OS / Junos OS Evolved releases specified in advisory JSA112187, or temporarily disable BMP route monitoring and Nonstop Active Routing (NSR) on ISO-VPN peerings until patching.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or NSR.