PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-101964 Juniper Networks CVE debrief

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet received over an established LDP session. This medium-severity vulnerability can lead to potential disruption of network operations, emphasizing the need for network administrators and security teams to assess exposure and prioritize verification of LDP session security, update to a fixed version, and monitor for suspicious LDP activity. The CVE Program record and NVD vulnerability detail provide official information on the vulnerability, while the Juniper Networks support portal offers

Vendor
Juniper Networks
Product
Junos OS
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Network administrators and security teams responsible for Junos OS and Junos OS Evolved systems should assess exposure and prioritize verification of LDP session security.

Why it matters

CVE-2026-101964 is a medium-severity vulnerability in Junos OS and Junos OS Evolved that allows an adjacent attacker to cause an rpd crash via a crafted LDP packet. Network administrators and security teams should assess exposure and prioritize verification of LDP session security, update to a fixed version, and monitor for suspicious LDP activity.

  • Potential disruption of network operations due to rpd crashes.
  • Need for verification of LDP session security and access controls.
  • Possible impact on network availability and reliability.

Technical summary

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a crafted LDP packet received over an established LDP session. The vulnerability is triggered by a specific malformed LDP message that causes an assertion failure in the rpd, leading to a potential disruption of network operations. Network administrators should assess exposure and prioritize verification of LDP session security, update to a fixed version, and monitor for suspicious LDP and

Defensive priority

Network administrators should assess exposure and prioritize verification of LDP session security.

Recommended defensive actions

  • Verify LDP session security and restrict access to trusted sources.
  • Update to a fixed version of Junos OS or Junos OS Evolved.
  • Monitor for suspicious LDP activity.

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information on the vulnerability. The Juniper Networks support portal provides additional vendor-specific information.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-101964 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-101964

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-101964 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-101964

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.