Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.2

Juniper Junos OS Evolved can crash when BGP/LDP uses key-chain

CVE-2026-102068 · published today
Summary

Juniper's Junos OS Evolved can experience a sudden system crash if an attacker sends a specially crafted network packet while BGP or LDP is using key‑chain authentication. This could cause loss of routing services and interruption of network traffic. Apply the latest software update from Juniper that fixes the problem as soon as possible.

What to do
  • Update juniper networks junos os evolved to version 23.2R2-S7.7-EVO or later.
Affected software
VendorProductAffected versions
juniper networks junos os evolved < 23.2R2-S7.7-EVO
Original advisory text
Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is used
A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP packet when key-chain authentication is used for BGP or LDP.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
9.2 Critical
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
CVE-2026-102068 · NVD
CVE-2026-102068 · MITRE
Track software like this
Free during beta