PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-102064 Juniper Networks CVE debrief

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer. This high-severity vulnerability can disrupt network operations, emphasizing the need for network administrators and security teams to assess exposure, prioritize verification, and apply necessary mitigations. The vulnerability's impact includes potential disruption of network operations due to rpd crashes, necessitating verification of Junos OS and Junos OS Evolved versions and careful monitoring for exploitation attempts.

Vendor
Juniper Networks
Product
Junos OS
CVSS
HIGH 7.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-16
Advisory published
2026-10-14
Advisory updated
2026-10-16

Who should care

Network administrators and security teams responsible for Junos OS and Junos OS Evolved systems should assess exposure and prioritize verification and mitigation.

Why it matters

CVE-2026-102064 is a high-severity vulnerability in Junos OS and Junos OS Evolved that can cause rpd crashes, potentially disrupting network operations. Network administrators and security teams should assess exposure, prioritize verification and mitigation, and monitor for potential exploitation attempts.

  • Potential disruption of network operations due to rpd crashes
  • Need for verification of Junos OS and Junos OS Evolved versions
  • Potential impact on network availability and reliability

Technical summary

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP MCAST-VPN updates from a configured eBGP peer. The vulnerability is considered high-severity and can lead to disruptions in network operations. Network administrators should assess exposure, prioritize verification of affected versions, and implement necessary mitigations to prevent potential exploitation.

Defensive priority

Network administrators should assess exposure and prioritize verification of Junos OS and Junos OS Evolved versions, especially those listed as affected.

Recommended defensive actions

  • Verify Junos OS and Junos OS Evolved versions against the affected versions list
  • Assess network exposure and prioritize patching or mitigation
  • Monitor for malformed BGP MCAST-VPN updates from eBGP peers

Evidence notes

The CVE record and source item provide details on the vulnerability, but limited information is available on exploitation or impact. Defenders should verify Junos OS and Junos OS Evolved versions against the affected list, assess network exposure, and monitor for malformed BGP MCAST-VPN updates from eBGP peers. The lack of detailed information on exploitation or specific affected systems requires a cautious approach, focusing on vendor advisories and official CVE metadata for accurate,

Sources and references

Verified primary and authoritative sources

  • CVE-2026-102064 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-102064

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-102064 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102064

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.