CVE-2026-33795 Juniper Networks CVE debrief

Who should care

Network administrators and security teams responsible for Juniper Networks Junos OS and Junos OS Evolved deployments should assess exposure and potential impact. They should prioritize verifying exposure and assessing potential impact, especially for Juniper Networks Junos OS and Junos OS Evolved deployments. This includes reviewing the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Why it matters

CVE-2026-33795 is a high-severity vulnerability in Juniper Networks Junos OS and Junos OS Evolved that can cause a denial of service via a BGP Prefix-SID route advertisement. Network administrators and security teams should prioritize verifying exposure and assessing potential impact.

• Denial of service via routing-daemon crash
• Potential disruption to network operations
• Need for verification of Junos OS and Junos OS Evolved versions
• Potential need for upgrades or compensating controls

Technical summary

A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised. This issue does not affect versions of Junos OS prior to 20.4R1. This issue does not affect versions of Junos OS Evolved prior to 20.4R1-EVO. The vulnerability can cause a routing-daemon crash, leading to potential disruption to network operations. Network administrators and security teams should prioritize verifying exposure and assessing potential impact.

Defensive priority

Network administrators and security teams should prioritize verifying exposure and assessing potential impact, especially for Juniper Networks Junos OS and Junos OS Evolved deployments.

Recommended defensive actions

• Verify exposure by checking Junos OS and Junos OS Evolved versions against the affected versions list
• Assess potential impact on network operations and security
• Implement compensating controls, such as monitoring BGP Prefix-SID route advertisements
• Consider upgrading to unaffected versions of Junos OS and Junos OS Evolved
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on a Numeric Truncation Error vulnerability in Juniper Networks Junos OS and Junos OS Evolved, which allows an unauthenticated network-based attacker to cause a denial of service via a BGP Prefix-SID route advertisement that is subsequently re-advertised.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.