NetSight
critical9.8

CVE-2026-101990

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured B…

Impact

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.

Affected products

VendorProductAffected versions
JuniperJunos Os Evolved
through 23.1
Versions 23.2, 23.4, 23.4x100, 24.2, 24.4
JuniperJunos
through 23.1
Versions 23.2, 23.4, 24.2, 24.4, 25.2

Weakness classification

References