CVE-2026-102063

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Junos MX Series via eBGP Route Update

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102063

EUVD

EUVD-2026-101433

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion in Juniper Networks Junos OS routing protocol daemon (rpd) on MX Series routers. It allows an unauthenticated network attacker to cause a denial of service by sending a specific eBGP route update when HFRR link protection is configured in a VRF.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected crashes or high CPU usage in the routing protocol daemon (rpd) on MX Series routers with HFRR link protection configured in a VRF. Check logs for assertion failures or BGP route update errors. Juniper recommends monitoring system logs and using commands like 'show system processes extensive' or 'show log messages' to identify abnormal behavior.

Impact Analysis

The vulnerability can cause a denial of service on affected MX Series routers, disrupting network routing and potentially leading to loss of connectivity or service outages.

Compliance Impact

This vulnerability causes a denial of service via eBGP route updates when HFRR link protection is configured in a VRF. Such disruptions could lead to service unavailability, which may impact compliance with standards requiring high availability or data processing integrity, such as GDPR or HIPAA.

Mitigation Strategies

Disable HFRR link protection in VRF configurations on MX Series routers running Junos OS to prevent the reachable assertion issue. Apply Junos OS patches or updates once available from Juniper Networks.

Hi! I’m here to help you understand CVE-2026-102063. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70