Junos OS and Junos OS Evolved: A EVPN peer causes an rpd crash or root-level compromise when EVPN-VPWS is used

Description

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root code execution on Junos OS or an rpd crash on Junos OS Evolved via protocol-valid route advertisements for an EVPN-VPWS service.

Affected Products

Vendor	Product	Versions
juniper	junos os	0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 23.4X100, 25.2X100, 25.4X300

References

https://supportportal.juniper.net/JSA112187(vendor-advisory)

Related News (2 articles)

Tier B

CERT-FR4d ago

Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

→ No new info (linked only)

Tier C

VulDB5d ago

CVE-2026-101982 | Juniper Networks Junos OS/Junos OS Evolved Routing Protocol Daemon buffer overflow

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

23.2R2-S7.723.4R2-S8.1324.2R2-S5.524.4R2-S525.2R2-S225.4R1-S326.2R1-S223.2R2-S7.7-EVO23.4R2-S8.11-EVO24.2R2-S5.6-EVO24.4R2-S5-EVO25.2R2-S2-EVO25.4R1-S3-EVO26.2R1-S2-EVO25.2X100-D35-EVO25.4X300-D40-EVO

CWECWE-121

PublishedOct 14, 2026

Last enriched5d ago

Trending Score32

Source articles2

Independent2

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack