CVE-2026-102184

Awaiting Analysis Awaiting Analysis - Queue

Improper Input Validation in Juniper Junos OS EVPN SRv6

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configured EVPN signaling peer to cause an rpd crash via a malformed SRv6 structure carried in an EVPN route update. The result is a denial of service affecting routing adjacencies.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102184

EUVD

EUVD-2026-101399

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1284	The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Validation of Specified Quantity in Input issue in Juniper Networks Junos OS and Junos Evolved platforms. It allows a configured EVPN signaling peer to send a malformed SRv6 structure in an EVPN route update, causing the routing protocol daemon (rpd) to crash. This results in a denial of service affecting routing adjacencies.

Detection Guidance

This vulnerability can be detected by monitoring for rpd crashes or routing adjacency issues on Juniper devices running affected Junos OS or Junos Evolved versions. Check logs for malformed SRv6 structures in EVPN route updates. Juniper may provide specific diagnostic commands in their security advisories.

Impact Analysis

The vulnerability can cause your network's routing protocol daemon to crash, leading to a loss of routing adjacencies. This disrupts network connectivity and may result in downtime for services relying on the affected Juniper devices.

Compliance Impact

This vulnerability causes a denial of service affecting routing adjacencies due to improper validation of input in the routing protocol daemon. While it does not directly impact data confidentiality or integrity, prolonged service disruption could affect availability of network services, which may indirectly impact compliance with standards requiring reliable data access such as GDPR (availability principle) or HIPAA (operational safeguards).

Mitigation Strategies

Apply the latest Junos OS or Junos Evolved OS security patches from Juniper Networks to address the improper validation issue in the routing protocol daemon (rpd).

Hi! I’m here to help you understand CVE-2026-102184. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70