PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-102072 Juniper Networks CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T16:16:17.489Z. Junos OS has a medium-severity vulnerability that can cause a denial of service when the gRPC extension-service is enabled. Network administrators and security teams should assess exposure and prioritize verification of versions and configurations. The vulnerability is caused by Improper Handling of Highly Compressed Data in the gRPC library used by na-grpcd of Juniper Networks Junos OS.

Vendor
Juniper Networks
Product
Junos OS
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-14
Original CVE updated
2026-10-14
Advisory published
2026-10-14
Advisory updated
2026-10-14

Who should care

Network administrators and security teams responsible for Junos OS deployments should assess exposure and prioritize verification of versions and configurations. They should also restrict gRPC extension-service access to mitigate potential exposure. This includes verifying Junos OS versions, reviewing compensating controls, and monitoring for updates from Juniper Networks.

Why it matters

CVE-2026-102072 is a medium-severity vulnerability in Junos OS that can cause a denial of service when the gRPC extension-service is enabled. Network administrators and security teams should prioritize verification of Junos OS versions and restrict gRPC extension-service access to mitigate potential exposure.

  • Denial of service via compressed gRPC requests
  • Verification of Junos OS versions and configurations
  • Restriction of gRPC extension-service access
  • Monitoring for updates from Juniper Networks

Technical summary

An authenticated network-based attacker can cause a denial of service in Junos OS via a compressed gRPC request when the gRPC extension-service is enabled. This is due to Improper Handling of Highly Compressed Data in the gRPC library used by na-grpcd of Juniper Networks Junos OS. Affected product deployments should be verified for exposure, and administrators should restrict gRPC extension-service access to mitigate potential exposure.

Defensive priority

Network administrators and security teams should prioritize verification of Junos OS versions and restrict gRPC extension-service access.

Recommended defensive actions

  • Verify Junos OS versions and configurations
  • Restrict gRPC extension-service access
  • Monitor for updates from Juniper Networks

Evidence notes

The CVE record and source item provide details on the vulnerability in Junos OS, but affected versions and remediation require verification from official sources.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-102072 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-102072

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-102072 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102072

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.