CVE-2026-101944 Juniper Networks CVE debrief

Who should care

Network administrators and security teams responsible for managing Junos OS and Junos OS Evolved devices, particularly those using EVPN configurations, should assess exposure and prioritize verification and remediation efforts.

Why it matters

CVE-2026-101944 is a high-severity vulnerability in Junos OS and Junos OS Evolved that can cause a denial of service to the routing protocol daemon via specially crafted EVPN route updates. Network administrators and security teams should prioritize verification of EVPN configurations, assess exposure, and apply patches or updates to prevent potential network instability or outages.

• Denial of service to routing protocol daemon
• Potential network instability or outages
• Need for verification of EVPN configurations and exposure
• Priority for applying vendor-provided patches or updates

Technical summary

The Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer. This vulnerability affects Junos OS and Junos OS Evolved devices using EVPN configurations. Network administrators and security teams should prioritize verification of EVPN configurations and assess exposure to potential routing protocol daemon denial-of-service attacks.

Defensive priority

Network administrators and security teams should prioritize verification of EVPN configurations and assess exposure to potential routing protocol daemon denial-of-service attacks.

Recommended defensive actions

• Verify EVPN configurations and assess exposure to potential routing protocol daemon denial-of-service attacks
• Review and apply vendor-provided patches or updates for affected Junos OS and Junos OS Evolved versions
• Monitor network traffic and routing protocol daemon logs for suspicious activity
• Implement compensating controls, such as rate limiting or filtering, for EVPN route updates
• Review asset inventory for Junos OS and Junos OS Evolved deployments
• Plan for vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved, which allows an attacker to cause a denial of service via specially crafted EVPN route updates from an accepted EVPN BGP peer.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.