CVE-2026-101957: CWE-665 Improper Initialization in Juniper Networks Junos OS

This vulnerability (CVE-2026-101957) involves improper initialization in the routing protocol daemon (rpd) component of Juniper Networks Junos OS and Junos OS Evolved. Specifically, a remote BGP peer can trigger a crash of the rpd by sending an LLGR-stale route update that is readvertised to a configured non-LLGR peer group. The flaw leads to a denial of service condition by crashing the routing daemon, potentially disrupting network routing functions. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability. The affected versions include multiple release trains and subversions of Junos OS and Junos OS Evolved as detailed in the affectedVersions field.

Successful exploitation results in a denial of service condition by crashing the routing protocol daemon (rpd) on affected Junos OS devices. This can disrupt BGP routing operations and network availability. There is no impact on confidentiality or integrity according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the official Juniper Networks security advisories for current remediation guidance. Until a patch is applied, consider limiting BGP peer interactions to trusted entities and monitoring for anomalous LLGR-stale route updates. No vendor advisory content was provided to indicate if no action is required or if a workaround exists.