Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-102072 EUVD-2026-101435GHSA-734c-f3j9-8vw8

Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled

Published Oct 14, 2026 · Updated Oct 14, 2026 · Assigned by juniper

Description

An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cause a denial of service via a compressed gRPC request.

Affected products

VendorProductAffectedFixed
Juniper Networks Junos OS < 23.2R2-S7.7, 23.4 – < 23.4R2-S8.13, 24.2 – < 24.2R2-S5.5, 24.4 – < 24.4R2-S5, 25.2 – < 25.2R2-S2, 25.4 – < 25.4R1-S3, 26.2 – < 26.2R1-S2 23.2R2-S7.7

Advisories 1

References