CVE-2026-102030

Awaiting Analysis Awaiting Analysis - Queue

Incomplete Cleanup Flaw in Juniper Junos OS MVPN Neighbor

Publication date: 2026-10-14

Last updated on: 2026-10-16

Assigner: Juniper Networks, Inc.

Description

An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of service via a BGP MVPN update when an inter‑region segmented VRF with 'protocols mvpn inter-region-template' is configured.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-16

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102030

EUVD

EUVD-2026-101355

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-459	The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

Executive Summary

This vulnerability is an Incomplete Cleanup issue in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the rpd process and allows a configured MVPN neighbor to cause a denial of service by sending a BGP MVPN update. This happens specifically when an inter-region segmented VRF with 'protocols mvpn inter-region-template' is configured.

Detection Guidance

This vulnerability is specific to Juniper Junos OS and Junos OS Evolved with MVPN configurations. Detection requires checking for the presence of 'protocols mvpn inter-region-template' in the configuration and monitoring for BGP MVPN update issues. Use 'show configuration protocols mvpn' to verify MVPN settings and 'show system processes extensive | match rpd' to check rpd process status.

Impact Analysis

The vulnerability can lead to a denial of service, disrupting network services and causing downtime. Attackers could exploit it to crash the rpd process, leading to service unavailability for users and systems relying on the affected Juniper devices.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is a denial-of-service issue in Juniper Junos OS related to MVPN configurations. Compliance impacts would depend on system availability and data protection measures, not the vulnerability itself.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks. Disable inter-region segmented VRF with 'protocols mvpn inter-region-template' if not required. Monitor rpd process logs for unusual BGP MVPN update activity.

Hi! I’m here to help you understand CVE-2026-102030. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70