CVE-2026-102029 Juniper Networks CVE debrief

Who should care

Network administrators and security teams responsible for Juniper Networks Junos OS and Junos OS Evolved configurations should assess exposure and prioritize patching, especially for configurations using MSDP or PIM policies with AS-path expansion. They should review MSDP and PIM policy configurations for AS-path expansion and monitor for potential denial of service attacks.

Why it matters

CVE-2026-102029 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved that can cause denial of service attacks. Network administrators and security teams should prioritize verifying and applying patches, especially for configurations using MSDP or PIM policies with AS-path expansion.

• Denial of service attacks via MSDP or PIM policy with AS-path expansion
• Potential network downtime and disruption
• Need for verification and patching of vulnerable configurations
• Possible impact on network reliability and availability

Technical summary

A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service via an MSDP or PIM policy that uses AS-path expansion. The vulnerability has a high severity score of 7.5 and affects configurations using MSDP or PIM policies with AS-path expansion. Network administrators and security teams should prioritize verifying and applying patches, especially for configurations using MSDP or PIM policies with AS-path expansion.

Defensive priority

Network administrators and security teams should prioritize verifying and applying patches for Juniper Networks Junos OS and Junos OS Evolved, especially for configurations using MSDP or PIM policies with AS-path expansion.

Recommended defensive actions

• Verify and apply patches for Juniper Networks Junos OS and Junos OS Evolved
• Review MSDP and PIM policy configurations for AS-path expansion
• Monitor for potential denial of service attacks
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance

Evidence notes

The CVE record and source item provide details on a NULL Pointer Dereference vulnerability in Juniper Networks Junos OS and Junos OS Evolved, which allows an unauthenticated configured MSDP peer or adjacent PIM sender to cause a denial of service.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.