CVE-2026-33789
9.8CriticalPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
An unauthenticated remote BGP peer can execute code as root or crash the routing protocol daemon via malicious route updates. The attacker only needs an established BGP session on a device where BGP Monitoring Protocol (BMP) is enabled.
Root cause
A stack-based buffer overflow in the routing protocol daemon (rpd) occurs when handling crafted BGP route updates while BMP is active.
Affected systems
Versions not listed — check the vendor advisory.
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade Junos OS and Junos OS Evolved to the resolved release referenced in JSA112187, or disable BMP under 'protocols bgp monitoring' or 'protocols bmp' as a temporary mitigation until patched.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled.