CVE-2026-102016: CWE-1284 Improper Validation of Specified Quantity in Input in Juniper Networks Junos OS

This vulnerability (CVE-2026-102016) arises from improper validation of specified quantity in input within the rpd process of Juniper Networks Junos OS and Junos OS Evolved. Specifically, a configured BGP MVPN peer can send a crafted BGP MVPN signaling update that causes a denial of service (DoS) by disrupting the rpd process. The issue is tracked under CWE-1284 and has a CVSS 3.1 base score of 7.5, indicating high severity. Multiple version ranges of Junos OS and Junos OS Evolved are affected, with fixed versions starting from releases beyond those listed in the affectedVersions field. There is no indication of known exploitation in the wild, and no vendor advisory or patch links were provided in the input data.

Successful exploitation results in a denial of service condition affecting the rpd process on Junos OS devices, potentially disrupting BGP MVPN routing functionality. There is no reported impact on confidentiality or integrity, only availability is affected. The vulnerability can be triggered remotely without authentication, increasing its risk profile.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory was provided in the input, users should monitor Juniper Networks' security advisories for updates and apply patches or mitigations as soon as they become available. Until then, consider restricting or monitoring BGP MVPN peer connections to trusted entities to reduce exposure.