Description
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.
Published: 2026-10-14
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via routing protocol crash
Action: Apply Patch
AI Analysis

Impact

An Improper Input Validation vulnerability (CWE-20) in the routing protocol daemon (rpd) allows an unauthenticated network-based attacker to send a crafted BGP EVPN update message that is not properly validated, causing rpd to crash and the device to lose routing functionality.

Affected Systems

The affected products are Juniper Networks Junos OS and Junos OS Evolved. All releases prior to Junos OS 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1 and the corresponding Junos OS Evolved releases 23.2R2-S7.7-EVO through 26.4R1-EVO are impacted. The listed releases and all subsequent ones contain the fix.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity. EPSS score is < 1%, indicating a very low but non-zero exploitation probability. The vulnerability is not in the CISA KEV catalog, but the potential for denial of service on critical network infrastructure remains a significant risk. The flaw is exploitable by an unauthenticated remote attacker with no special privileges, making it attractive to threat actors.

Generated by OpenCVE AI on October 15, 2026 at 17:06 UTC.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: Junos OS: 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases. Junos OS Evolved: 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO, and all subsequent releases. Note: For Junos OS releases 23.2, 23.4, and 24.2, and Junos OS Evolved releases 23.2-EVO, 23.4-EVO, and 24.2-EVO, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.

Vendor Workaround

There are no known workarounds for this issue.

OpenCVE Recommended Actions

  • Update Junos OS or Junos OS Evolved to a release that includes the fix (e.g., version 23.2R2-S7.7 or later).
  • Configure BGP EVPN filters to accept updates only from recognized peers and block unexpected updates to mitigate the risk of the vulnerability until a patch is applied.
  • Enable monitoring of rpd process and system health logs to detect crashes early and initiate failover procedures.

Generated by OpenCVE AI on October 15, 2026 at 17:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 18 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 16 Oct 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved
Vendors & Products Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved

Wed, 14 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.
Title Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:M'}

Subscriptions

Juniper Networks Junos Os Junos Os Evolved
cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2026-10-18T13:54:08.400Z

Reserved: 2026-09-28T16:22:33.605Z

Link: CVE-2026-101943

cve-icon Vulnrichment

Updated: 2026-10-18T13:47:37.507Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T17:17:47.090

Modified: 2026-10-18T14:16:53.880

Link: CVE-2026-101943

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T23:00:06Z

Weaknesses
  • CWE-20

    Improper Input Validation