CVE-2026-102011

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Junos OS and Junos EVO via LDP Session

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP session when two misconfigured neighbors (or one neighbor duplicated by an L2 loop) advertise the same transport address on a link-protected interface.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102011

EUVD

EUVD-2026-101331

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion flaw in Juniper Networks Junos OS and Junos EVO. It occurs in the rpd process and allows an adjacent attacker to cause a denial of service by exploiting an established LDP session. The issue arises when two misconfigured neighbors (or one duplicated by an L2 loop) advertise the same transport address on a link-protected interface.

Detection Guidance

Detecting this vulnerability requires monitoring for duplicate transport addresses in LDP sessions or misconfigured neighbors. Check for L2 loops causing duplicate neighbors. Use Junos CLI commands like 'show ldp session' to inspect active LDP sessions and 'show ldp neighbor' to verify neighbor configurations. Look for inconsistent transport addresses on link-protected interfaces.

Impact Analysis

An attacker could exploit this to disrupt network services by causing a denial of service, leading to potential downtime or degraded performance for affected systems running vulnerable Juniper OS versions.

Compliance Impact

This vulnerability causes a denial of service via an established LDP session, which could disrupt network availability. Disruptions may impact systems handling sensitive data, potentially violating availability requirements in GDPR and HIPAA. However, the CVE does not explicitly link this issue to compliance failures.

Mitigation Strategies

Disable LDP sessions on link-protected interfaces if misconfigured neighbors or L2 loops are detected. Verify neighbor configurations and remove duplicate transport addresses. Monitor rpd process logs for assertion failures and apply Junos OS patches from Juniper Networks.

Hi! I’m here to help you understand CVE-2026-102011. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70