CVE-2026-102185

Awaiting Analysis Awaiting Analysis - Queue

Infinite Loop in Juniper Junos OS and Junos OS Evolved via EVPN Multihoming

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description

A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102185

EUVD

EUVD-2026-101400

Affected Vendors & Products

Vendor	Product	Version / Range
Juniper	Networks	Junos OS 0
Juniper	Networks	Junos OS 23.4
Juniper	Networks	Junos OS 24.2
Juniper	Networks	Junos OS 24.4
Juniper	Networks	Junos OS 25.2
Juniper	Networks	Junos OS 25.4
Juniper	Networks	Junos OS 26.2
Juniper	Networks	Junos OS Evolved 0
Juniper	Networks	Junos OS Evolved 23.4
Juniper	Networks	Junos OS Evolved 24.2
Juniper	Networks	Junos OS Evolved 24.4
Juniper	Networks	Junos OS Evolved 25.2
Juniper	Networks	Junos OS Evolved 25.4
Juniper	Networks	Junos OS Evolved 26.2
Juniper	Networks	Junos OS Evolved 23.4X100
Juniper	Networks	Junos OS Evolved 25.2X100
Juniper	Networks	Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-835	The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Attack-Flow Graph

Executive Summary

This is an Infinite Loop vulnerability in Juniper Networks Junos OS and Junos OS Evolved routing protocol daemon (rpd). It occurs during EVPN multihoming with preference-based designated-forwarder election, allowing a remote attacker to cause a denial of service by triggering an unreachable exit condition in the loop.

Detection Guidance

Detecting this vulnerability requires monitoring for infinite loops in the routing protocol daemon (rpd) on Juniper Junos OS or Junos OS Evolved systems. Check for high CPU usage by rpd using commands like 'show system processes extensive' or 'top'. Monitor logs for repeated EVPN multihoming errors with 'show evpn instance extensive' or 'show log messages | match rpd'. Look for unresponsive routing protocols or BGP/EVPN neighbor flapping.

Impact Analysis

The vulnerability can cause network disruption by making the routing protocol daemon unresponsive, leading to service outages. This may result in loss of network connectivity, degraded performance, or complete failure of routing functions in affected Juniper devices.

Compliance Impact

This vulnerability causes a denial of service via an infinite loop in the routing protocol daemon, which can disrupt network services. Such disruptions may lead to violations of availability requirements in GDPR and HIPAA, potentially impacting compliance with data protection and security standards.

Mitigation Strategies

Apply the latest Junos OS or Junos OS Evolved patches from Juniper Networks to address the infinite loop issue in the routing protocol daemon (rpd) related to EVPN multihoming with preference-based designated-forwarder election.

Hi! I’m here to help you understand CVE-2026-102185. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70