CVE-2026-101952: Junos OS and Junos OS Evolved: A specific BGP ISO-VPN update causes an rpd crash when BMP or NSR is enabled
An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO-VPN peer to cause an rpd crash by sending a specific ISO-VPN update which is then processed by BMP route monitoring or NSR.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Exposure requires a configured BGP ISO-VPN peer and either BMP route monitoring or NSR enabled, because the crash occurs when the ISO-VPN update is processed by BMP or NSR.
What does an attacker need to exploit it?
An attacker needs to be a configured BGP ISO-VPN peer capable of sending a specific ISO-VPN update. No privileges or user interaction are required.
What is the expected impact of successful exploitation?
Successful exploitation crashes the routing protocol daemon (rpd), resulting in a denial-of-service condition. The provided data does not indicate confidentiality or integrity impact.