Description
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.
Published: 2026-10-14
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Denial of Service via routing protocol crash
Action: Apply Patch
AI Analysis

Impact

An attacker can send a crafted BGP EVPN update message that is not properly validated by the routing protocol daemon (rpd) in Juniper Networks Junos OS and Junos OS Evolved. The flaw allows the attacker to cause a crash of rpd, resulting in a denial of service. The vulnerability does not provide code execution or higher privileges, but it can bring the device offline and disrupt network connectivity.

Affected Systems

The affected products are Juniper Networks Junos OS and Junos OS Evolved. All releases prior to Junos OS 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1 and the corresponding Junos OS Evolved releases 23.2R2-S7.7-EVO through 26.4R1-EVO are impacted. The listed releases and all subsequent ones contain the fix.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity. No EPSS score is provided, so the exploitation probability is unknown, but the condition of being exploitable by an unauthenticated remote attacker with no special privileges makes it potentially attractive. The vulnerability is not in the CISA KEV catalog, but the possibility of denial of service on critical network infrastructure remains a significant risk.

Generated by OpenCVE AI on October 14, 2026 at 22:13 UTC.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: Junos OS: 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 25.4R2, 26.2R1-S2, 26.2R2, 26.4R1, and all subsequent releases. Junos OS Evolved: 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO, and all subsequent releases. Note: For Junos OS releases 23.2, 23.4, and 24.2, and Junos OS Evolved releases 23.2-EVO, 23.4-EVO, and 24.2-EVO, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.

Vendor Workaround

There are no known workarounds for this issue.

OpenCVE Recommended Actions

  • Update Junos OS or Junos OS Evolved to a release that includes the fix (e.g., version 23.2R2-S7.7 or later).
  • Configure BGP EVPN filters to accept updates only from recognized peers and block unexpected updates to mitigate the risk of the vulnerability until a patch is applied.
  • Enable monitoring of rpd process and system health logs to detect crashes early and initiate failover procedures.

Generated by OpenCVE AI on October 14, 2026 at 22:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.
Title Junos OS and Junos OS Evolved: An attacker causes rpd crash and denial of service when EVPN is configured
Weaknesses CWE-20
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:M'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2026-10-14T16:42:15.164Z

Reserved: 2026-09-28T16:22:33.605Z

Link: CVE-2026-101943

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-14T17:17:47.090

Modified: 2026-10-14T17:17:47.090

Link: CVE-2026-101943

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-14T22:15:08Z

Weaknesses
  • CWE-20

    Improper Input Validation