Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-102063 EUVD-2026-101433GHSA-xp4x-7pfr-9746

Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used

Published Oct 14, 2026 · Updated Oct 14, 2026 · Assigned by juniper

Description

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial of service via an eBGP route update when HFRR link protection is configured in a VRF.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7

Advisories 1

References