CVE-2026-101993

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a denial of service via a VPLS signaling update when automatic site-ID negotiation is enabled.

Score

CVSS 4.0 7.1 High

Status

Awaiting Analysis - sirt@juniper.net

Published

2026-10-14

Last modified

2026-10-15

Weaknesses

CWE-617

Affected products

• Junos Os (Juniper Networks)
• Junos Os Evolved (Juniper Networks)

References

• https://supportportal.juniper.net/JSA112187