CVE-2026-102087
Received
Received - Intake
Denial-of-Service in Juniper Networks Junos OS and Junos OS Evolved
Vulnerability report for CVE-2026-102087, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: Juniper Networks, Inc.
Description
Description
An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).
When in a BGP traffic engineering scenario a specific, valid, optional, non-transitive BGP update is received over an established BGP session, RPD crashes and automatically restarts, which leads to traffic impact until routing has reconverged.
This issue affects:
Junos OS:
* All versions before 23.2R2-S6;
* 23.4 versions before 23.4R2-S7;
* 24.2 versions before 24.2R2-S4;
* 24.4 versions before 24.4R2-S4;
* 25.2 versions before 25.2R1-S2, 25.2R2;
Junos OS Evolved:
* All versions before 23.2R2-S6-EVO;
* 23.4 versions before 23.4R2-S8.11-EVO;
* 24.2 versions before 24.2R2-S4-EVO;
* 24.4 versions before 24.4R2-S5-EVO;
* 25.2 versions before 25.2R1-S2-EVO, 25.2R2-EVO;
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Juniper | Networks | Junos OS 0 |
| Juniper | Networks | Junos OS 23.4 |
| Juniper | Networks | Junos OS 24.2 |
| Juniper | Networks | Junos OS 24.4 |
| Juniper | Networks | Junos OS 25.2 |
| Juniper | Networks | Junos OS Evolved 0 |
| Juniper | Networks | Junos OS Evolved 23.4 |
| Juniper | Networks | Junos OS Evolved 24.2 |
| Juniper | Networks | Junos OS Evolved 24.4 |
| Juniper | Networks | Junos OS Evolved 25.2 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-184 | The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are not allowed by policy or otherwise require other action to neutralize before additional processing takes place, but the list is incomplete. |
