CVE-2026-102019
Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS RIPv2 DoS

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed RIPv2 message.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-102019
EUVD
EUVD-2026-101344

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1284 The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Improper Validation of Specified Quantity in Input issue in the rpd process of Juniper Networks Junos OS and Junos Evolved. An unauthenticated adjacent attacker can exploit it by sending a malformed RIPv2 message, causing a denial-of-service condition.

Impact Analysis

The vulnerability allows an attacker to disrupt network services by crashing the rpd process, leading to downtime and loss of connectivity for affected systems running Junos OS or Junos Evolved.

Compliance Impact

This vulnerability causes a denial-of-service condition via malformed RIPv2 messages, which could disrupt network services. Such disruptions may impact compliance with standards requiring availability of systems, such as GDPR (data processing integrity) or HIPAA (system availability for protected health information).

Mitigation Strategies

Apply the latest security patches from Juniper Networks for Junos OS and Junos Evolved to address the improper validation in the rpd process handling RIPv2 messages.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102019. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart