CVE-2026-102042: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-102042) involves a reachable assertion failure in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can trigger this flaw via RSVP-TE associated bidirectional LSP signaling, causing the routing process to crash. The impact is limited to availability disruption (denial of service). The CVSS 3.1 vector indicates the attack requires adjacent network access, low attack complexity, no privileges, no user interaction, and affects availability only. Affected versions span multiple release ranges of Junos OS and Junos OS Evolved, including specific subversions and platform variants. The vendor advisory or patch status is not included in the provided data.

The vulnerability allows an adjacent attacker to cause a denial of service by crashing the routing process (rpd) on affected Junos OS and Junos OS Evolved devices. There is no impact on confidentiality or integrity. This disruption could affect network availability and routing stability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no vendor advisory or patch links are provided, users should monitor Juniper Networks' official security advisories for updates and apply patches or mitigations as soon as they become available.