Junos OS and Junos OS Evolved: When BGP update-threading is enabled a specifically malformed flowspec NLRI causes routing-engine compromise

Description

A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engine compromise or a routing-daemon denial of service via flowspec route re-advertisement when BGP update-threading is enabled.

Affected Products

Vendor	Product	Versions
juniper	junos os	0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 23.4X100, 25.2X100, 25.4X300

References

https://supportportal.juniper.net/JSA112187(vendor-advisory)

Related News (2 articles)

Tier B

CERT-FR4d ago

Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

→ No new info (linked only)

Tier C

VulDB5d ago

CVE-2026-102178 | Juniper Networks Junos OS/Junos OS Evolved BGP stack-based overflow

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

23.2R2-S7.723.4R2-S8.1324.2R2-S5.524.4R2-S525.2R2-S225.4R1-S326.2R1-S223.2R2-S7.7-EVO23.4R2-S8.11-EVO24.2R2-S5.6-EVO24.4R2-S5-EVO25.2R2-S2-EVO25.4R1-S3-EVO26.2R1-S2-EVO25.2X100-D35-EVO25.4X300-D40-EVO

CWECWE-121

PublishedOct 14, 2026

Trending Score32

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack