CVE-2026-102016
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-1284
Impact
A configured BGP MVPN peer can crash the routing protocol daemon (rpd) and cause a denial of service. The attacker needs an established BGP peering session to send a malformed MVPN signaling update.
Root cause
The rpd process fails to properly validate the quantity or size specified in inbound BGP MVPN signaling update packets.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Junos OS and Junos OS Evolved to the fixed releases listed in advisory JSA112187. As an interim workaround, tear down or apply route policies to restrict BGP MVPN sessions to fully trusted peers.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause a denial of service via a BGP MVPN signaling update.