PatchSiren cyber security CVE debrief
CVE-2026-102043 Juniper Networks CVE debrief
CVE-2026-102043 debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T16:52:11.938Z and has not been modified since then. This medium-severity vulnerability in Junos OS and Junos OS Evolved can cause a routing-process crash when MPLS-TE fast reroute is enabled. Network administrators and security teams should assess their exposure and prioritize patching. The vulnerability is caused by a Numeric Truncation Error in the rpd process, allowing an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling.
- Vendor
- Juniper Networks
- Product
- Junos OS
- CVSS
- MEDIUM 6.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-10-14
- Original CVE updated
- 2026-10-14
- Advisory published
- 2026-10-14
- Advisory updated
- 2026-10-14
Who should care
Network administrators and security teams responsible for managing Juniper Networks Junos OS and Junos OS Evolved systems should assess their exposure and prioritize patching.
Why it matters
CVE-2026-102043 is a medium-severity vulnerability in Junos OS and Junos OS Evolved that can cause a routing-process crash when MPLS-TE fast reroute is enabled. Network administrators and security teams should prioritize verifying and applying patches, reviewing network configurations, and monitoring system logs.
- Verify and apply patches to prevent routing process crashes
- Monitor system logs for signs of exploitation attempts
- Review and update network configurations to prevent potential attacks
Technical summary
A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE fast-reroute signaling. The vulnerability affects various versions of Junos OS and Junos OS Evolved, including those prior to 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, and 26.2R1-S2. Network administrators and security teams should prioritize verifying and applying patches.
Defensive priority
Network administrators and security teams should prioritize verifying and applying patches for Juniper Networks Junos OS and Junos OS Evolved, especially for versions prior to 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, and 26.2R1-S2.
Recommended defensive actions
- Verify and apply patches for affected Junos OS and Junos OS Evolved versions
- Review and update network configurations to prevent potential attacks
- Monitor system logs for signs of exploitation attempts
Evidence notes
The CVE record and source item provide details on the vulnerability, including its description, CVSS score, and affected versions of Junos OS and Junos OS Evolved. However, there is limited information on potential exploits or attacks.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-102043 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-102043
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-102043 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102043
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast rero
Unverified legacy reference
URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102043.json
cve_program_cvelist_v5
-
Source reference
Unverified legacy reference
URL: https://supportportal.juniper.net/JSA112187
Supplemental source - vendor-advisory
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.