Description
A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.
Published: 2026-10-14
Score: 8.7 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

A reachable assertion in the na-grpcd process of Junos OS Evolved allows a remote, unauthenticated attacker to crash the daemon via a gRPC telemetry subscription request. The resulting denial of service can suspend or terminate telemetry services and potentially impair network management functions, but it does not provide code execution or privilege escalation. The weakness is classified as CWE-617.

Affected Systems

Juniper Networks Junos OS Evolved devices are affected. The vulnerability exists in the following releases: 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO, and all subsequent releases.

Risk and Exploitability

The CVSS score of 8.7 highlights a high severity denial‑of‑service risk. With no EPSS score available, the likelihood remains uncertain, yet the vulnerability is not listed in the CISA KEV catalog. Because an unauthenticated attacker can send a crafted gRPC telemetry request over the network, the attack vector is inferred to be remote, potentially from any host with network reach to the Junos device.

Generated by OpenCVE AI on October 14, 2026 at 23:28 UTC.

Remediation

Vendor Solution

The following software releases have been updated to resolve this specific issue: Junos OS Evolved: 23.2R2-S7.7-EVO, 23.4R2-S8.11-EVO, 24.2R2-S5.6-EVO, 24.4R2-S5-EVO, 25.2R2-S2-EVO, 25.2X100-D35-EVO, 25.4R1-S3-EVO, 25.4R2-EVO, 25.4X300-D40-EVO, 26.2R1-S2-EVO, 26.2R2-EVO, 26.4R1-EVO, and all subsequent releases. Note: For Junos OS Evolved releases 23.2-EVO, 23.4-EVO, and 24.2-EVO, specific respins have been referenced. Previously published versions of these releases have been rebuilt to resolve the security vulnerabilities identified in this advisory.

Vendor Workaround

There are no known workarounds for this issue.

OpenCVE Recommended Actions

  • Upgrade Junos OS Evolved to release 23.2R2‑S7.7‑EVO or later as specified in the vendor advisory
  • If an upgrade cannot be performed immediately, disable gRPC telemetry subscriptions
  • Block gRPC traffic (e.g., port 50051) at the perimeter to prevent exploitation

Generated by OpenCVE AI on October 14, 2026 at 23:28 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
Description A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.
Title Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
Weaknesses CWE-617
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/AU:Y/R:A/V:C/RE:M'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published:

Updated: 2026-10-14T16:44:46.159Z

Reserved: 2026-09-28T17:33:49.409Z

Link: CVE-2026-102012

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-14T17:17:53.370

Modified: 2026-10-14T17:17:53.370

Link: CVE-2026-102012

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-14T23:30:09Z

Weaknesses