CVE-2026-101989 Juniper Networks CVE debrief

Who should care

Defenders responsible for Junos OS and Junos OS Evolved systems should assess exposure and prioritize patching to prevent potential service disruption and impact on network stability. They should verify the current version and apply patches as recommended by the vendor. Security teams and network administrators should review the vulnerability details and implement necessary mitigations to protect against potential r

Why it matters

Defenders should care about CVE-2026-101989 because it can cause rpd crashes in Junos OS and Junos OS Evolved, potentially disrupting services and impacting network stability. Affected versions need to be verified and patched.

• Potential service disruption due to rpd crashes
• Need for verification of current version and patch application
• Possible impact on network stability and reliability

Technical summary

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP neighbor to cause an rpd crash via a crafted LDP message. The vulnerability has a CVSS score of 6.5 and is considered MEDIUM severity. The affected products are Junos OS and Junos OS Evolved. The vulnerability can be exploited by a compromised LDP neighbor, which can cause an rpd crash.

Defensive priority

Defenders should prioritize verifying and updating to non-affected versions of Junos OS and Junos OS Evolved.

Recommended defensive actions

• Verify and update to non-affected versions of Junos OS and Junos OS Evolved
• Review and implement vendor-provided patches
• Monitor for suspicious LDP messages

Evidence notes

The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected versions. The source item and CVE Program record confirm the vulnerability's existence and provide additional context. However, the exact scope of affected versions and specific patches required are not detailed in the provided sources. Defenders should verify the current version and apply patches as recommended by the vendor. The evidence is limited to publicly-disl

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.