CVE-2026-101992
Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS BGP VPLS

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
An Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an rpd crash via a BGP VPLS signaling update.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-101992
EUVD
EUVD-2026-101479

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-20 The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Input Validation issue in Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP peer to send a specially crafted BGP VPLS signaling update that causes the routing protocol daemon (rpd) process to crash.

Detection Guidance

This vulnerability can be detected by monitoring the routing protocol daemon (rpd) process for crashes or unexpected behavior, particularly after BGP VPLS signaling updates. Check logs for rpd crashes or core dumps. Monitor BGP peer sessions for unusual activity or disconnections.

Impact Analysis

The crash of the rpd process can disrupt routing functionality, leading to network instability or outages. This may cause loss of connectivity and affect services relying on BGP routing.

Compliance Impact

The vulnerability does not directly impact compliance with GDPR or HIPAA as it involves a network routing issue rather than data handling or privacy. However, service disruptions caused by rpd crashes could indirectly affect availability requirements in these standards.

Mitigation Strategies

Update Junos OS or Junos OS Evolved to the latest patched version to address the BGP VPLS signaling update vulnerability. Disable BGP VPLS signaling updates if not required. Monitor rpd process logs for crashes or unexpected behavior.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-101992. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart