CVE-2026-102064
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-617
Impact
A remote attacker can crash the routing protocol daemon (rpd), causing a denial of service across the device. They need an established eBGP peering session configured to receive BGP MCAST-VPN updates.
Root cause
The routing protocol daemon fails an internal assertion check when handling malformed BGP MCAST-VPN update packets.
Affected systems
Juniper Networks Junos OS and Junos OS Evolved; specific version ranges are not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Junos OS/Junos OS Evolved to the resolved release specified in Juniper advisory JSA112187. As an interim workaround, disable BGP MCAST-VPN NLRI or drop unverified eBGP sessions using firewall filters.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer.