CVE-2026-33796
9.8CriticalPublished 14 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- Full C/I/A compromise
- Weakness
- CWE-121
Impact
A configured external BGP neighbor can execute arbitrary commands with root privileges on the device. Attackers must have network access and be established as a configured external BGP peer with BMP route monitoring active.
Root cause
A stack-based buffer overflow in the routing protocol daemon (rpd) mishandles incoming BGP traffic during BMP route monitoring.
Affected systems
Juniper Networks Junos OS and Junos OS Evolved (specific versions not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Fix & remediation
Upgrade to fixed Junos OS/Junos OS Evolved releases per advisory JSA112187; if upgrading must wait, disable BMP route monitoring or restrict/tear down untrusted external BGP peering sessions.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.