Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.2
CVE-2026-33789: Juniper Junos OS BGP monitoring can crash system
CVE-2026-33789 · published today
Summary
Juniper's Junos OS and Junos OS Evolved can be forced to stop working if a network device that talks to them sends specially crafted routing information while the BGP Monitoring feature is turned on. This can bring down the router and could let an attacker run commands on it. Apply the latest software updates from Juniper and consider disabling the BGP Monitoring feature until the patch is installed.
What to do
- Update juniper networks junos os to version 23.2R2-S7.7 or later.
- Update juniper networks junos os evolved to version 23.2R2-S7.7-EVO or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| juniper networks | junos os | < 23.2R2-S7.7 |
| juniper networks | junos os evolved | < 23.2R2-S7.7-EVO |
Original advisory text
Junos OS and Junos OS Evolved: With BGP Monitoring Protocol is enabled, receipt of a specifically crafted BGP route update results in denial of service
A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a denial of service and potential root-level command execution via crafted BGP route updates when the BGP Monitoring Protocol (BMP) is enabled.
References
- https://supportportal.juniper.net/JSA112187 vendor-advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.2
Critical
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Track software like this
Free during beta