Patchfirst
CVE-2026-102178 Critical · 9.8 EPSS 0.5%

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS…

Juniper Networks · Junos OS

Summary

A stack-based buffer overflow in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved. An attacker who is a configured BGP flowspec peer can trigger it via flowspec route re-advertisement, when BGP update-threading is enabled, to compromise the routing engine or crash the routing daemon.

Official description · NVD

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled.

Breakdown
14.8 / 100
Exploited
Not confirmed
Reports
0
Tactics
0/15

Disclosed on 14 Oct 2026. No public exploit code or confirmed exploitation is recorded.

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

References

1 link, grouped by NVD tag
↑ ↓ chooseEnter openEsc close