An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or NSR.
History

Tue, 20 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 19 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1284

Fri, 16 Oct 2026 23:00:00 +0000

Type Values Removed Values Added
First Time appeared Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved
Vendors & Products Juniper Networks
Juniper Networks junos Os
Juniper Networks junos Os Evolved

Thu, 15 Oct 2026 15:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20

Wed, 14 Oct 2026 22:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20

Wed, 14 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Description An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or NSR.
Title Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: juniper

Published: 2026-10-14T17:21:17.618Z

Updated: 2026-10-19T14:14:00.546Z

Reserved: 2026-09-28T16:28:35.624Z

Link: CVE-2026-101952

cve-icon Vulnrichment

Updated: 2026-10-14T20:17:54.854Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T18:17:11.110

Modified: 2026-10-19T15:16:53.243

Link: CVE-2026-101952

cve-icon Redhat

No data.