CVE-2026-102065
Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS BGP SRv6 Service Route

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause an rpd crash via a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-102065
EUVD
EUVD-2026-101447

Affected Vendors & Products

Showing 15 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1284 The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper validation of input in Juniper Networks Junos OS and Junos OS Evolved. A remote unauthenticated BGP peer can exploit it by sending a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled, causing the routing protocol daemon (rpd) to crash.

Detection Guidance

Detecting this vulnerability requires monitoring for rpd crashes or BGP session disruptions when SRv6 dynamic tunnels are enabled. Check logs for rpd crashes or BGP peer disconnections. Juniper recommends enabling detailed logging for BGP and SRv6 events to identify malformed packets.

Impact Analysis

The vulnerability can lead to denial of service as the rpd crash disrupts routing functionality. This may cause network outages or instability, affecting connectivity and services relying on the affected Junos OS or Junos OS Evolved systems.

Compliance Impact

The vulnerability could lead to service disruption via rpd crashes, potentially causing network outages. This may impact availability requirements in GDPR and HIPAA, which mandate reliable access to personal or health data. However, specific compliance impacts depend on system configuration and deployment context.

Mitigation Strategies

Disable SRv6 dynamic tunnels if enabled, as the vulnerability is triggered when these are active. Update Junos OS or Junos OS Evolved to the latest patched version to address the issue.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102065. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart