PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-102058 Juniper Networks CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T16:55:20.349Z and has not been modified since then. CVE-2026-102058 is a medium-severity vulnerability in Junos OS and Junos OS Evolved that can cause a denial of service via crafted BFD session traffic. The vulnerability exists in the bfdd daemon, allowing an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon. Network administrators and security teams should prioritize verification of BFD-enabled systems and apply patches or updates as needed.

Vendor
Juniper Networks
Product
Junos OS
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Network administrators and security teams responsible for Junos OS and Junos OS Evolved systems, especially those with exposure to adjacent unauthenticated attackers, should assess their systems for potential vulnerability.

Why it matters

CVE-2026-102058 is a medium-severity vulnerability in Junos OS and Junos OS Evolved that can cause a denial of service via crafted BFD session traffic. Network administrators and security teams should prioritize verification of BFD-enabled systems and apply patches or updates as needed.

  • Denial of service via crafted BFD session traffic
  • Potential disruption of network operations
  • Need for verification of BFD-enabled systems
  • Possible impact on network availability

Technical summary

A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of service by restarting the daemon via crafted BFD session traffic. The vulnerability is caused by a reachable assertion in the bfdd daemon, which can be triggered by crafted BFD session traffic. This can lead to a denial of service, potentially disrupting network operations. Verification of BFD-enabled Junos OS and Junos OS Evolved systems is crucial, especially those with exposure to

Defensive priority

Network administrators and security teams should prioritize verification of BFD-enabled Junos OS and Junos OS Evolved systems, especially those with exposure to adjacent unauthenticated attackers.

Recommended defensive actions

  • Verify BFD-enabled Junos OS and Junos OS Evolved systems for exposure
  • Review and apply vendor-provided patches or updates
  • Monitor system logs for suspicious BFD session traffic
  • Consider implementing compensating controls, such as rate limiting or traffic filtering

Evidence notes

The CVE record and source item provide details on the vulnerability in Junos OS and Junos OS Evolved, specifically in the bfdd daemon, which allows an unauthenticated adjacent attacker to cause a denial of service.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-102058 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-102058

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-102058 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102058

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.