PatchSiren cyber security CVE debrief
CVE-2026-102183 Juniper Networks CVE debrief
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-14T16:58:04.080Z and has not been modified since then. This HIGH-severity vulnerability in Junos OS and Junos OS Evolved can cause rpd crashes via a specifically malformed NLRI. Network administrators and security teams should prioritize verification of Junos OS and Junos OS Evolved versions, and apply patches or mitigations as available. The vulnerability affects the routing protocol daemon (rpd) and is triggered by a configured BGP EVPN peer.
- Vendor
- Juniper Networks
- Product
- Junos OS
- CVSS
- HIGH 7.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-10-14
- Original CVE updated
- 2026-10-14
- Advisory published
- 2026-10-14
- Advisory updated
- 2026-10-14
Who should care
Network administrators and security teams responsible for Junos OS and Junos OS Evolved devices should assess exposure and prioritize patching or mitigation.
Why it matters
CVE-2026-102183 is a HIGH-severity vulnerability in Junos OS and Junos OS Evolved that can cause rpd crashes. Network administrators and security teams should prioritize verification of Junos OS and Junos OS Evolved versions, and apply patches or mitigations as available.
- Verify Junos OS and Junos OS Evolved versions to determine if vulnerable
- Apply patches or mitigations as available to prevent rpd crashes
- Monitor network devices for unusual activity indicative of exploitation attempts
- Review and update incident response plans in case of potential exploitation
Technical summary
A vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP EVPN peer to cause an rpd crash via a specifically malformed NLRI. This HIGH-severity vulnerability can cause rpd crashes and requires verification of Junos OS and Junos OS Evolved versions, and application of patches or mitigations as available.
Defensive priority
Network administrators and security teams should prioritize verification of Junos OS and Junos OS Evolved versions, and apply patches or mitigations as available.
Recommended defensive actions
- Verify Junos OS and Junos OS Evolved versions and apply patches or mitigations as available
- Monitor network devices for unusual activity
- Review and update incident response plans
Evidence notes
The CVE record and source item provide details on the vulnerability in Junos OS and Junos OS Evolved. The NVD entry is currently not provided. Evidence is limited to the information available from the CVE Program record and the source item. Defenders should verify the affected scope, severity, and vendor guidance. The vulnerability is caused by an Improper Validation of Specified Quantity in Input in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-102183 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-102183
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-102183 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-102183
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashe
Unverified legacy reference
URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/102xxx/CVE-2026-102183.json
cve_program_cvelist_v5
-
Source reference
Unverified legacy reference
URL: https://supportportal.juniper.net/JSA112187
Supplemental source - vendor-advisory
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.