CVE-2026-101945: CWE-190 Integer Overflow or Wraparound in Juniper Networks Junos OS

This vulnerability involves an integer overflow or wraparound in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. A remote attacker who has an established EVPN BGP peering relationship can exploit this flaw during EVPN BGP route processing to cause a denial of service condition. The issue specifically affects EVPN-enabled routing instances and can disrupt control-plane adjacencies, impacting network stability and availability. The vulnerability is tracked as CVE-2026-101945 with a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Successful exploitation results in denial of service (DoS) by disrupting control-plane adjacencies in EVPN-enabled routing instances. There is no impact on confidentiality or integrity, but availability is severely affected. This can lead to network instability or outages in affected Junos OS deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Juniper Networks advisories for updates and apply fixes once available. Until then, restricting EVPN BGP peering relationships to trusted entities may reduce exposure.