CVE-2026-102022

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Networks Junos OS BGP-LS

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS peer to cause an rpd crash via a crafted BGP-LS Link NLRI advertisements.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102022

EUVD

EUVD-2026-101347

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion issue in Juniper Networks Junos OS and Junos OS Evolved. It allows an attacker with access to a configured BGP-LS peer to cause the routing protocol daemon (rpd) to crash by sending specially crafted BGP-LS Link NLRI advertisements.

Detection Guidance

Detecting this vulnerability requires monitoring for BGP-LS Link NLRI advertisements that may cause rpd crashes. Check BGP-LS logs for malformed or unexpected advertisements. Use 'show log messages' and 'show bgp summary' commands to inspect rpd status and BGP-LS peers. Monitor for rpd crashes or core dumps in system logs.

Impact Analysis

An attacker could exploit this to cause a denial of service by crashing the rpd, disrupting routing and network operations. This could lead to network instability or outages for affected systems.

Compliance Impact

The vulnerability allows an attacker to cause an rpd crash via crafted BGP-LS Link NLRI advertisements, which could lead to denial of service. This may impact compliance by disrupting network availability, potentially violating requirements for continuous operation in standards like GDPR (data processing integrity) and HIPAA (system availability for protected health information).

Mitigation Strategies

Immediately disable BGP-LS peering sessions if not required. Apply the latest Junos OS or Junos OS Evolved patches from Juniper Networks. Filter BGP-LS Link NLRI advertisements using routing policies to block malformed or suspicious updates. Monitor rpd for crashes and restart services if necessary.

Hi! I’m here to help you understand CVE-2026-102022. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70