CVE-2026-102041
Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Networks Junos OS RSVP Daemon

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated network attacker to cause a denial of service via malformed RSVP signaling when RSVP is enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-11-08
AI Q&A
2026-10-15
EPSS Evaluated
2026-11-07
NVD
CVE-2026-102041
EUVD
EUVD-2026-101365

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Reachable Assertion flaw in Juniper Networks Junos OS and Junos OS Evolved. It exists in the rpd routing daemon and is triggered by malformed RSVP signaling when RSVP is enabled. An adjacent unauthenticated attacker can exploit this to cause a denial of service.

Detection Guidance

This vulnerability can be detected by monitoring for crashes or abnormal behavior in the rpd routing daemon when RSVP is enabled. Check for RSVP-related processes using commands like 'show system processes | match rpd' or 'ps aux | grep rpd' on Junos OS systems. Monitor logs for assertion failures or segmentation faults in rpd with 'show log messages | match rpd' or 'show log chassisd | match assertion'.

Impact Analysis

The impact includes potential network outages or degraded performance due to the denial of service. If your network relies on Junos OS or Junos OS Evolved with RSVP enabled, an attacker could disrupt routing services.

Compliance Impact

This vulnerability causes a denial of service via malformed RSVP signaling, which could disrupt network availability. Disruptions may impact systems handling sensitive data, potentially violating compliance requirements for availability in standards like GDPR and HIPAA.

Mitigation Strategies

Disable RSVP on affected Juniper devices if not required. Apply available Junos OS or Junos OS Evolved patches from Juniper Networks. Monitor network traffic for malformed RSVP signaling as a potential attack vector.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102041. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...