Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled

Description

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.

Affected Products

Vendor	Product	Versions
juniper	junos os	0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 0, 23.4, 24.2, 24.4, 25.2, 25.4, 26.2, 23.4X100, 25.2X100, 25.4X300

References

https://supportportal.juniper.net/JSA112187(vendor-advisory)

Related News (2 articles)

Tier B

CERT-FR4d ago

Multiples vulnérabilités dans les produits Juniper Networks (15 octobre 2026)

→ No new info (linked only)

Tier C

VulDB5d ago

CVE-2026-33796 | Juniper Networks Junos OS/Junos OS Evolved rpd buffer overflow

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.8 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

23.2R2-S7.723.4R2-S8.1324.2R2-S5.524.4R2-S525.2R2-S225.4R1-S326.2R1-S223.2R2-S7.7-EVO23.4R2-S8.11-EVO24.2R2-S5.6-EVO24.4R2-S5-EVO25.2R2-S2-EVO25.4R1-S3-EVO26.2R1-S2-EVO25.2X100-D35-EVO25.4X300-D40-EVO

CWECWE-121

PublishedOct 14, 2026

Trending Score33

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack