Patchfirst
Patchfirst
CVE-2026-101990 Critical · 9.8 EPSS 0.6%

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…

Juniper Networks · Junos OS

Summary

A stack-based buffer overflow in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved lets a remote, configured BGP peer trigger an rpd crash, and on Junos OS it can also lead to remote code execution. The attack is carried out by sending a flow-spec update that is selected for re-advertisement, and it requires only that the attacker be a configured BGP peer, with no user interaction needed.

Official description · NVD

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.

Breakdown
18.4 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 14 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 8 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

1 link, grouped by NVD tag

Vendor Advisory 1

supportportal.juniper.net/JSA112187
↑ ↓ chooseEnter openEsc close