CVE-2026-101975: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-101975) involves a reachable assertion failure in the routing protocol daemon (rpd) component of Juniper Networks Junos OS and Junos OS Evolved. An adjacent OSPF peer can exploit this by sending specially crafted OSPF traffic while the OSPF Source Packet Routing best-route Prefix-SID installation feature is enabled, causing the daemon to crash and resulting in a denial of service. The issue affects a range of Junos OS versions prior to certain patch releases, including both standard and evolved variants. The CVSS 3.1 vector indicates the attack requires adjacent network access, low complexity, no privileges, no user interaction, and impacts availability only.

Successful exploitation results in denial of service of the routing protocol daemon, potentially disrupting network routing on affected devices. There is no impact on confidentiality or integrity. The attack requires adjacency to the OSPF peer, limiting the attack surface to directly connected or trusted network segments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, consider disabling the OSPF Source Packet Routing best-route Prefix-SID installation feature if feasible or restricting adjacency to trusted OSPF peers to reduce exposure.