CVE-2026-101989

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Junos OS rpd via LDP Message

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP neighbor to cause an rpd crash via a crafted LDP message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101989

EUVD

EUVD-2026-101481

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion flaw in Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon (rpd). It allows a compromised LDP neighbor to send a specially crafted LDP message that causes the rpd process to crash.

Detection Guidance

This vulnerability can be detected by monitoring for crashes in the routing protocol daemon (rpd) on Juniper Junos OS or Junos OS Evolved systems. Check logs for rpd crashes or unexpected terminations. Monitor LDP neighbor sessions for unusual activity or malformed messages.

Impact Analysis

The impact includes disruption of network routing services due to rpd crashes, leading to potential network outages or instability. An attacker could exploit this to cause denial of service conditions on affected systems.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by causing service disruptions due to rpd crashes, potentially leading to unauthorized access or data processing interruptions. However, the specific compliance impact depends on system configuration and deployment.

Mitigation Strategies

Update Junos OS or Junos OS Evolved to the latest patched version to address the Reachable Assertion vulnerability in the routing protocol daemon (rpd).

Hi! I’m here to help you understand CVE-2026-101989. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70