CVE-2026-33795
Awaiting Analysis Awaiting Analysis - Queue

Numeric Truncation Error in Juniper Junos OS BGP Prefix-SID Route

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Juniper Networks, Inc.

Description
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised. This issue does not affect versions of Junos OS prior to 20.4R1. This issue does not affect versions of Junos OS Evolved prior to 20.4R1-EVO

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-14
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-33795
EUVD
EUVD-2026-101403

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-197 Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Numeric Truncation Error in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. It allows an unauthenticated attacker to cause a denial of service by sending a BGP Prefix-SID route advertisement that is later re-advertised.

Detection Guidance

This vulnerability is specific to Juniper Junos OS and Junos OS Evolved versions 20.4R1 and later. Detection requires checking for BGP Prefix-SID route advertisements that may cause a numeric truncation error in the rpd process. Monitor rpd logs for crashes or abnormal termination after processing BGP updates. Use 'show system processes extensive | match rpd' to check rpd status and 'show log messages | last 100' to review recent errors.

Impact Analysis

The vulnerability can lead to a denial of service, disrupting network operations and causing service outages for affected Juniper devices running vulnerable versions.

Compliance Impact

The vulnerability causes a denial of service via BGP Prefix-SID route advertisement, which could disrupt network availability. This may impact compliance with GDPR or HIPAA by compromising data processing integrity or availability requirements, but specific compliance effects are not detailed in the provided context.

Mitigation Strategies

Upgrade affected Juniper Junos OS and Junos OS Evolved versions to 20.4R1 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33795. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart