PatchSiren cyber security CVE debrief
CVE-2026-102041 Juniper Networks CVE debrief
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T16:51:47.688Z and has not been modified since then. This medium-severity vulnerability in Junos OS and Junos OS Evolved can cause a denial of service via malformed RSVP signaling. Network administrators and security teams should assess exposure and potential impact. The vulnerability is caused by a Reachable Assertion issue in the rpd routing daemon, allowing an adjacent unauthenticated network attacker to cause a denial of service when RSVP is enabled.
- Vendor
- Juniper Networks
- Product
- Junos OS
- CVSS
- MEDIUM 6.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-10-14
- Original CVE updated
- 2026-10-14
- Advisory published
- 2026-10-14
- Advisory updated
- 2026-10-14
Who should care
Network administrators and security teams responsible for managing Junos OS and Junos OS Evolved systems should assess exposure and potential impact.
Why it matters
CVE-2026-102041 is a medium-severity vulnerability in Junos OS and Junos OS Evolved that can cause a denial of service via malformed RSVP signaling. Network administrators and security teams should prioritize verifying exposure and assessing potential impact.
- Denial of service via routing daemon crash
- Potential disruption to network operations
- Need for verification of Junos OS and Junos OS Evolved versions
- Potential for increased security monitoring and incident response
Technical summary
A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated network attacker to cause a denial of service via malformed RSVP signaling when RSVP is enabled. The vulnerability affects Junos OS and Junos OS Evolved systems, and network administrators should verify exposure and assess potential impact. The issue is related to the processing of RSVP signaling, and an attacker can exploit it to cause a denial of service.
Defensive priority
Network administrators and security teams should prioritize verifying exposure and assessing potential impact.
Recommended defensive actions
- Verify exposure by checking Junos OS and Junos OS Evolved versions
- Assess potential impact on network operations
- Apply vendor-provided patches or updates
- Monitor network activity for suspicious RSVP signaling
Evidence notes
The CVE record and source item provide details on a Reachable Assertion vulnerability in Junos OS and Junos OS Evolved, allowing an adjacent unauthenticated network attacker to cause a denial of service via malformed RSVP signaling when RSVP is enabled.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-102041 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-102041
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-102041 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102041
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
Unverified legacy reference
URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102041.json
cve_program_cvelist_v5
-
Source reference
Unverified legacy reference
URL: https://supportportal.juniper.net/JSA112187
Supplemental source - vendor-advisory
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.