CVE-2026-101944: CWE-190 Integer Overflow or Wraparound in Juniper Networks Junos OS

This vulnerability involves an integer overflow or wraparound in the routing protocol daemon (rpd) component of Juniper Networks Junos OS and Junos OS Evolved. An attacker with the ability to send EVPN route updates from an accepted EVPN BGP peer can exploit this flaw to cause a denial of service condition. The issue affects a broad range of versions across multiple release trains, including both standard and evolved versions of Junos OS. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and no privileges or user interaction required, impacting availability only.

Successful exploitation results in denial of service (DoS) of the routing protocol daemon, potentially disrupting network routing and connectivity. There is no impact on confidentiality or integrity. The vulnerability can be triggered remotely by an attacker capable of sending EVPN route updates from an accepted EVPN BGP peer.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Users should monitor Juniper Networks advisories for updates and apply patches once available. Until then, restricting EVPN BGP peer access to trusted entities may reduce exposure.