CVE-2026-102063: Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used
A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 23.2R2-S7.7 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 23.4R2-S8.13 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 24.2R2-S5.5 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 24.2R2-S6 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 24.4R2-S5 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 25.2R2-S2 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 25.4R1-S3 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 25.4R2 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 26.2R1-S2 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 26.2R2 - Upgrade
Upgrade
Juniper Junos OS (MX Series)to a version that resolves this vulnerability.Fixed in 26.4R1
Event History
Frequently Asked Questions
Which deployments are exposed?
The issue affects Juniper Networks Junos OS on MX Series routers where HFRR link protection is configured in a VRF and the device processes eBGP route updates.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates no privileges and no user interaction are required, and the attacker is described as unauthenticated and network-based.
What is the expected security impact?
The reported impact is denial of service through an rpd crash. The provided CVSS vector indicates high availability impact, with no confidentiality or integrity impact.