CVE-2026-102070

Awaiting Analysis Awaiting Analysis - Queue

Reachable Assertion in Juniper Networks Junos OS TWAMP Client

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause rmopd service disruption via a specific TCP packet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102070

EUVD

EUVD-2026-101437

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-617	The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

Executive Summary

This vulnerability is a Reachable Assertion issue in Juniper Networks Junos OS affecting the Two-Way Active Measurement Protocol (TWAMP) client. An unauthenticated attacker can send a specific TCP packet to disrupt the rmopd service, causing service outages.

Detection Guidance

This vulnerability involves a Reachable Assertion in Juniper Networks Junos OS TWAMP client. Detection requires checking for rmopd service disruptions caused by specific TCP packets. Monitor network traffic for unusual TCP packets targeting the TWAMP port. Inspect Junos OS logs for rmopd service crashes or errors. Juniper recommends updating Junos OS to the latest version to mitigate this issue.

Impact Analysis

The vulnerability allows an attacker to disrupt network services by crashing the rmopd service, leading to potential downtime or loss of measurement capabilities in affected Juniper devices.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling service disruption through unauthenticated network-based attacks. GDPR requires organizations to ensure the availability of processing systems, while HIPAA mandates safeguards against disruptions to critical services. Exploitation of this flaw may lead to violations of these requirements.

Mitigation Strategies

Apply the latest Junos OS security patch from Juniper Networks to address the TWAMP client vulnerability. Monitor network traffic for unusual TCP packets targeting the rmopd service and restrict access to TWAMP ports if not required.

Hi! I’m here to help you understand CVE-2026-102070. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70