CVE-2026-102065
7.5HighPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-1284
Impact
Remote unauthenticated BGP peers can crash the routing protocol daemon (rpd), causing a complete denial of service for routing. Attackers only need network connectivity to an established BGP session with SRv6 dynamic tunnels enabled.
Root cause
Improper input validation in rpd improperly handles malformed BGP-signaled SRv6 service routes.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Junos OS and Junos OS Evolved to the resolved release specified in Juniper advisory JSA112187. As an interim workaround, disable SRv6 dynamic tunnels or filter untrusted BGP updates advertising SRv6 service routes.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled.