CVE-2026-102000: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-102000) involves a reachable assertion in the rpd process of Juniper Networks Junos OS and Junos EVO. An adjacent attacker without authentication can send LDP control traffic that triggers this assertion, resulting in a denial of service condition. The affected versions span multiple release trains and include both standard Junos OS and Junos EVO variants. The vulnerability is classified under CWE-617 (Reachable Assertion). The CVSS 3.1 vector indicates the attack requires adjacent network access, no privileges or user interaction, and impacts availability only.

Successful exploitation causes a denial of service by crashing or disrupting the rpd process, which is critical for routing protocol operations in Junos OS and Junos EVO. There is no impact on confidentiality or integrity. The attack surface requires adjacency, meaning the attacker must be on a directly connected network segment. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no explicit patch links are provided, users should monitor Juniper Networks advisories for updates. Until a patch is applied, network segmentation to limit adjacent access to LDP control traffic may reduce exposure. No vendor advisory states that no action is required or that the issue is already mitigated.