The vulnerability is an improper validation of a specified quantity in input to the rpd process, which allows a configured BGP MVPN peer to trigger a routing outage by sending a malformed BGP MVPN signaling update. The flaw can cause a denial of service specifically targeting the routing engine, leading to loss of service for affected networks and disrupting traffic flows. It is categorized as CWE‑1284.

Affected systems include Juniper Networks Junos OS and Junos OS Evolved platforms. The list of component products spans the major releases 23.2, 23.4, 24.2, 25.2, 25.4, 26.2, 26.4, and all subsequent releases for both Junos OS and Junos OS Evolved. The advisory provides exact release identifiers that have been patched.

The vulnerability has a CVSS score of 8.7 and currently no EPSS score is available. It is not catalogued as a Known Exploit in the CISA KEV list. The likely attack vector is through a BGP MVPN peer that an administrator has configured; either a legitimate or compromised peer could send malicious updates. The exploitation does not require prior authentication or privileged access to the device, making it easier to exploit in environments that use BGP MVPN signaling.