CVE-2026-102087

Awaiting Analysis Awaiting Analysis - Queue

Denial-of-Service in Juniper Networks Junos OS and Junos OS Evolved

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS). When in a BGP traffic engineering scenario a specific, valid, optional, non-transitive BGP update is received over an established BGP session, RPD crashes and automatically restarts, which leads to traffic impact until routing has reconverged. This issue affects: Junos OS: * All versions before 23.2R2-S6; * 23.4 versions before 23.4R2-S7; * 24.2 versions before 24.2R2-S4; * 24.4 versions before 24.4R2-S4; * 25.2 versions before 25.2R1-S2, 25.2R2; Junos OS Evolved: * All versions before 23.2R2-S6-EVO; * 23.4 versions before 23.4R2-S8.11-EVO; * 24.2 versions before 24.2R2-S4-EVO; * 24.4 versions before 24.4R2-S5-EVO; * 25.2 versions before 25.2R1-S2-EVO, 25.2R2-EVO;

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102087

EUVD

EUVD-2026-101454

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-184	The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete.

Attack-Flow Graph

Executive Summary

This vulnerability is an Incomplete List of Disallowed Inputs flaw in Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon (rpd). It allows an unauthenticated adjacent attacker to cause a Denial-of-Service (DoS) by sending a specific valid BGP update in a traffic engineering scenario. This causes RPD to crash and restart, disrupting traffic until routing reconverges.

Detection Guidance

This vulnerability can be detected by checking the Junos OS or Junos OS Evolved version on your system. If your version is listed as affected in the CVE details, the system is vulnerable. Use the command 'show version' on Juniper devices to check the installed version.

Impact Analysis

The vulnerability can lead to network outages or degraded performance due to RPD crashes and automatic restarts. Traffic may be disrupted until routing protocols stabilize again. This affects systems running vulnerable versions of Junos OS or Junos OS Evolved in BGP environments.

Compliance Impact

This vulnerability causes a Denial-of-Service (DoS) by crashing the routing protocol daemon (RPD) in Juniper Junos OS and Junos OS Evolved, leading to traffic disruption until routing reconverges. Such disruptions could impact the availability of systems handling sensitive data, potentially violating compliance requirements for GDPR (data availability) and HIPAA (system reliability).

Mitigation Strategies

Upgrade Junos OS or Junos OS Evolved to a version that is not affected by this vulnerability. Affected versions include all releases before 23.2R2-S6, 23.4R2-S7, 24.2R2-S4, 24.4R2-S4, 25.2R1-S2, and 25.2R2 for Junos OS. For Junos OS Evolved, upgrade to versions before 23.2R2-S6-EVO, 23.4R2-S8.11-EVO, 24.2R2-S4-EVO, 24.4R2-S5-EVO, 25.2R1-S2-EVO, or 25.2R2-EVO.

Hi! I’m here to help you understand CVE-2026-102087. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70