CVE-2026-101962: CWE-130 Improper Handling of Length Parameter Inconsistency in Juniper Networks Junos OS

This vulnerability (CVE-2026-101962) arises from improper handling of length parameter inconsistencies in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. An attacker can send a specially malformed BGP EVPN multicast update that, when the rpd attempts to readvertise it, causes the daemon to crash. The issue is categorized under CWE-130 (Improper Handling of Length Parameter Inconsistency). The CVSS 3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service). Affected versions span multiple release trains of Junos OS and Junos OS Evolved as explicitly listed.

Successful exploitation results in a denial-of-service condition by crashing the routing protocol daemon (rpd), impacting the availability of affected Junos OS devices. There is no impact on confidentiality or integrity according to the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Juniper Networks vendor advisory for current remediation guidance. Until an official fix is available, consider limiting exposure to untrusted BGP EVPN multicast update sources to reduce risk. Monitor Juniper's security advisories for updates on patches or workarounds.