CVE-2026-102012

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Junos OS Evolved gRPC

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC telemetry subscription request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102012

EUVD

EUVD-2026-101332

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion issue in Juniper Networks Junos OS Evolved's na-grpcd process. It allows a remote unauthenticated attacker to cause a denial of service by sending a gRPC telemetry subscription request.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected crashes or high CPU usage in the na-grpcd process on Juniper Networks Junos OS Evolved systems. Check for gRPC telemetry subscription requests that may trigger the assertion failure. Use system logs to identify crashes or errors related to na-grpcd.

Impact Analysis

An attacker could exploit this to disrupt services by crashing the na-grpcd process, leading to service unavailability for legitimate users.

Compliance Impact

This vulnerability causes a denial of service via a gRPC telemetry subscription request, which could disrupt network services. Such disruptions may impact compliance with standards requiring availability of systems, such as GDPR (data processing continuity) or HIPAA (healthcare service reliability).

Mitigation Strategies

Apply the latest security patches from Juniper Networks for Junos OS Evolved to address the Reachable Assertion vulnerability in the na-grpcd process. Monitor Juniper's security advisories for updates and consider disabling gRPC telemetry subscriptions if not required.

Hi! I’m here to help you understand CVE-2026-102012. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70