PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-102036 Juniper Networks CVE debrief

A vulnerability in Junos OS and Junos OS Evolved could allow a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes. This issue affects various versions of Junos OS and Junos OS Evolved. The vulnerability is caused by an Integer Overflow or Wraparound in the l2ald process. Defenders should assess exposure and prioritize verification and updates. The issue requires attention from defenders responsible for Junos OS and Junos OS Evolved systems, particularly those using EVPN configurations.

Vendor
Juniper Networks
Product
Junos OS
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Defenders responsible for Junos OS and Junos OS Evolved systems, particularly those using EVPN configurations, should assess exposure and prioritize verification and updates.

Why it matters

Defenders should prioritize verifying and updating affected Junos OS and Junos OS Evolved versions to prevent potential denial of service attacks via EVPN Type-2 MAC/IP routes. This issue requires attention from defenders responsible for Junos OS and Junos OS Evolved systems, particularly those using EVPN configurations.

  • Potential denial of service attacks via EVPN Type-2 MAC/IP routes
  • Need to verify and update affected Junos OS and Junos OS Evolved versions
  • Possible impact on network availability and reliability

Technical summary

An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of service via EVPN Type-2 MAC/IP routes. The vulnerability occurs in the l2ald process, which handles EVPN BGP peer configurations. Affected versions of Junos OS and Junos OS Evolved require verification and updates to prevent potential denial of service attacks.

Defensive priority

Defenders should prioritize verifying and updating affected Junos OS and Junos OS Evolved versions to prevent potential denial of service attacks.

Recommended defensive actions

  • Verify and update affected Junos OS and Junos OS Evolved versions
  • Monitor EVPN BGP peer configurations for potential denial of service attacks
  • Implement compensating controls to mitigate potential impact

Evidence notes

The CVE record and source item provide details on the vulnerability, affected versions, and potential impact. However, there is limited information on exploitation or victim impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-102036 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-102036

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-102036 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102036

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.