CVE-2026-102041: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-102041) involves a reachable assertion in the rpd routing daemon component of Juniper Networks Junos OS and Junos OS Evolved. The flaw can be triggered by an adjacent unauthenticated network attacker through malformed RSVP signaling messages, leading to a denial of service condition. The vulnerability affects a range of Junos OS versions prior to specific patch releases, including multiple release trains and both standard and evolved versions. The CVSS 3.1 base score is 6.5 with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.

Successful exploitation results in denial of service (DoS) due to the reachable assertion failure in the routing daemon. There is no impact on confidentiality or integrity. The attack requires adjacency to the network and no authentication, making it a moderate risk for network availability.

Patch status is not yet confirmed — check the Juniper Networks vendor advisory for current remediation guidance. Until a patch is applied, consider disabling RSVP if it is not required, or restrict access to RSVP signaling from untrusted adjacent networks to mitigate exposure.