CVE-2026-33789: Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service

Published Oct 14, 2026

Updated

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled.

Affected Software

2 affected components

Juniper Networks Junos OS

Juniper Networks Junos OS Evolved

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Juniper Junos OS Evolved to a version that resolves this vulnerability.
Fixed in 26.4R1-EVO
Upgrade
Upgrade Juniper Junos OS to a version that resolves this vulnerability.
Fixed in 26.4R1

Event History

Oct 14, 2026

CVE Published

via MITRE·04:58 PM

Data Sourced

via MITRE·04:58 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated BGP peer can exploit it by sending specifically crafted BGP route updates. Exploitation does not require prior privileges or user interaction.

Is every Junos deployment affected?

The vulnerable condition requires the BGP Monitoring Protocol (BMP) to be enabled. The provided information does not establish whether BMP is enabled by default.

What is the potential impact beyond a routing outage?

A successful attack can cause a denial of service in the routing protocol daemon (rpd). The vulnerability may also allow potential command execution with root-level privileges.