CVE-2026-101943
Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS BGP EVPN

Publication date: 2026-10-14

Last updated on: 2026-10-18

Assigner: Juniper Networks, Inc.

Description
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a crafted BGP EVPN update message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-18
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101943
EUVD
EUVD-2026-101321

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Input Validation issue in Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon (rpd). It allows an unauthenticated attacker to cause a denial of service by sending a specially crafted BGP EVPN update message.

Detection Guidance

This vulnerability involves a crafted BGP EVPN update message causing a denial of service. Monitor for unexpected BGP EVPN traffic patterns or crashes in the routing protocol daemon (rpd). Check logs for rpd crashes or errors related to BGP EVPN updates. Juniper recommends inspecting BGP EVPN update messages for malformed or unexpected data.

Impact Analysis

The vulnerability can lead to a denial of service, causing network disruption or outages for affected Juniper devices running Junos OS or Junos OS Evolved. This may result in loss of connectivity and service interruptions.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling denial-of-service attacks that disrupt network availability. GDPR requires maintaining data processing integrity and availability, while HIPAA mandates reliable access to protected health information. A DoS condition may violate these requirements.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks to address the improper input validation in the routing protocol daemon (rpd) for BGP EVPN messages.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101943. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart