CVE-2026-102183

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS BGP EVPN

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause an rpd crash via a specifically malformed NLRI.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102183

EUVD

EUVD-2026-101398

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Validation of Specified Quantity in Input issue in Juniper Networks Junos OS and Junos OS Evolved. It allows a configured BGP EVPN peer to crash the routing protocol daemon (rpd) by sending a malformed Network Layer Reachability Information (NLRI) message.

Detection Guidance

This vulnerability can be detected by monitoring for rpd crashes or BGP EVPN session drops on Juniper devices. Check logs for 'rpd' crashes or BGP session resets. Use 'show system processes extensive | match rpd' to verify rpd status and 'show bgp neighbor' to inspect BGP EVPN sessions.

Impact Analysis

The vulnerability can cause the rpd to crash, leading to a denial of service for BGP EVPN routing. This disrupts network connectivity and services dependent on BGP EVPN, potentially causing outages or degraded performance.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by causing service disruptions through rpd crashes, potentially leading to unauthorized access or data breaches if exploited. The high availability impact (VA:H in CVSS v4.0) suggests significant operational risks that may violate availability requirements in these regulations.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved security patches from Juniper Networks to address the improper validation issue in the routing protocol daemon (rpd) for BGP EVPN peers.

Hi! I’m here to help you understand CVE-2026-102183. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70