CVE-2026-102035

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Junos OS MC-LAG IRB MAC Sync

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP peer message when MC-LAG IRB MAC synchronization is enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102035

EUVD

EUVD-2026-101360

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion flaw in Juniper Networks Junos OS and Junos OS Evolved. It occurs in the l2ald process when MC-LAG IRB MAC synchronization is enabled. An adjacent attacker can exploit this by sending a specially crafted ICCP peer message, causing a denial of service.

Impact Analysis

The vulnerability allows an attacker to disrupt network services by triggering a denial of service. This could lead to network outages, loss of connectivity, or degraded performance for affected systems running vulnerable Junos OS or Junos OS Evolved versions.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability causes a denial of service via a reachable assertion in the l2ald process, which may disrupt network services but lacks explicit compliance implications in the given context.

Mitigation Strategies

Disable MC-LAG IRB MAC synchronization on affected Juniper devices to prevent the reachable assertion condition. Monitor for l2ald process crashes or high CPU usage as potential indicators of exploitation.

Hi! I’m here to help you understand CVE-2026-102035. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70