Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2026-101990: Junos OS crashes when BGP re‑advertises flow‑spec routes
CVE-2026-101990 · published today
Summary
Juniper's Junos OS and Junos OS Evolved can stop working if a neighboring router sends a specially crafted flow‑spec update that the system tries to re‑advertise. This could cause the routing process to crash, potentially leading to loss of network connectivity or, in some cases, allow an attacker to run code on the device. Apply the latest Juniper security patches and verify that BGP peers are trusted and properly validated.
What to do
- Update juniper networks junos os to version 23.2R2-S7.7 or later.
- Update juniper networks junos os evolved to version 23.2R2-S7.7-EVO or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juniper networks | junos os | < 23.2R2-S7.7 |
| juniper networks | junos os evolved | < 23.2R2-S7.7-EVO |
Original advisory text
Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when flow-spec routes are re-advertised
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an rpd crash, or on Junos OS remote code-execution, via sending a flow-spec update which is selected for re-advertisement.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.3
Critical
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Track software like this
Free during beta