CVE-2026-102030: CWE-459 Incomplete Cleanup in Juniper Networks Junos OS

This vulnerability (CVE-2026-102030) involves incomplete cleanup in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. Specifically, when an inter-region segmented VRF is configured with 'protocols mvpn inter-region-template', a configured MVPN neighbor can send a BGP MVPN update that triggers a denial of service condition. The flaw is categorized under CWE-459 (Incomplete Cleanup). The vulnerability affects multiple versions of Junos OS and Junos OS Evolved, including various release trains and service releases prior to specific fixed versions. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). No known exploits in the wild have been reported.

Successful exploitation of this vulnerability results in a denial of service condition affecting the rpd process on Juniper Networks Junos OS and Junos OS Evolved devices. This can disrupt routing protocol operations related to MVPN and inter-region segmented VRFs, potentially impacting network availability. There is no reported impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling or avoiding configuration of 'protocols mvpn inter-region-template' with inter-region segmented VRFs if feasible. Monitor Juniper Networks advisories for updates and apply patches promptly once released.