CVE-2026-101982: CWE-121 Stack-based Buffer Overflow in Juniper Networks Junos OS

This vulnerability (CVE-2026-101982) is a stack-based buffer overflow in the routing protocol daemon (rpd) component of Juniper Networks Junos OS and Junos OS Evolved. It can be triggered by a configured BGP/EVPN peer sending specially crafted, protocol-valid route advertisements for an EVPN-VPWS service. Successful exploitation can lead to root code execution on Junos OS or cause the rpd process to crash on Junos OS Evolved. The vulnerability affects multiple versions across Junos OS and Junos OS Evolved, with affected versions including those prior to 23.2R2-S7.7, 23.4R2-S8.13, 24.2R2-S5.5, 24.4R2-S5, 25.2R2-S2, 25.4R1-S3, 26.2R1-S2 and their respective Evolved variants. The CVSS v3.1 base score is 9.8, reflecting critical impact on confidentiality, integrity, and availability. No vendor patch links were provided in the input, so patch status should be verified with Juniper Networks directly.

An attacker with the ability to configure a BGP/EVPN peer can exploit this vulnerability to execute code with root privileges on Junos OS, potentially gaining full control of the affected device. On Junos OS Evolved, exploitation results in a crash of the routing protocol daemon, causing denial of service. The vulnerability impacts confidentiality, integrity, and availability of the system, making it critical for network infrastructure security.

Patch status is not explicitly confirmed in the provided data. Users should consult the official Juniper Networks security advisories for the latest remediation information and apply any available patches or updates. Until patches are applied, restrict BGP/EVPN peer configurations to trusted entities only and monitor for unusual route advertisements related to EVPN-VPWS services. No vendor advisory stating 'no action required' or 'already mitigated' was provided, so assume remediation requires patching or configuration controls.