CVE-2026-33796
Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in Juniper Junos OS and Junos OS Evolved

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Juniper Networks, Inc.

Description
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-14
Last Modified
2026-10-15
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-33796
EUVD
EUVD-2026-101404

Affected Vendors & Products

Showing 17 associated CPEs
Vendor Product Version / Range
Juniper Networks Junos OS 0
Juniper Networks Junos OS 23.4
Juniper Networks Junos OS 24.2
Juniper Networks Junos OS 24.4
Juniper Networks Junos OS 25.2
Juniper Networks Junos OS 25.4
Juniper Networks Junos OS 26.2
Juniper Networks Junos OS Evolved 0
Juniper Networks Junos OS Evolved 23.4
Juniper Networks Junos OS Evolved 24.2
Juniper Networks Junos OS Evolved 24.4
Juniper Networks Junos OS Evolved 25.2
Juniper Networks Junos OS Evolved 25.4
Juniper Networks Junos OS Evolved 26.2
Juniper Networks Junos OS Evolved 23.4X100
Juniper Networks Junos OS Evolved 25.2X100
Juniper Networks Junos OS Evolved 25.4X300

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow in Juniper Networks Junos OS and Junos OS Evolved's routing protocol daemon (rpd). It allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.

Detection Guidance

This vulnerability can be detected by checking for unauthorized BGP neighbor configurations or BMP route monitoring on Juniper Junos OS and Junos OS Evolved systems. Review logs for unexpected command execution by rpd. Juniper recommends inspecting BGP and BMP configurations for external neighbors.

Impact Analysis

An attacker could exploit this to gain full control of affected systems, leading to data breaches, service disruption, or unauthorized access. Systems running vulnerable Junos OS or Junos OS Evolved versions are at risk.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, violating GDPR (data protection) and HIPAA (health data security) requirements. Organizations must address it to maintain compliance.

Mitigation Strategies

Immediately disable BMP route monitoring if configured. Update Junos OS or Junos OS Evolved to the latest patched version. Restrict BGP neighbor configurations to trusted sources only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33796. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart