CVE-2026-102043: CWE-197 Numeric Truncation Error in Juniper Networks Junos OS

This vulnerability involves a numeric truncation error (CWE-197) in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can exploit this flaw through MPLS-TE fast-reroute signaling to crash the routing process, resulting in denial of service. The CVSS 3.1 vector indicates the attack requires adjacent network access, has low attack complexity, no privileges or user interaction needed, and impacts availability only. The affected versions span multiple releases of Junos OS and Junos OS Evolved as explicitly listed. No known exploits in the wild have been reported, and no vendor patch or advisory details are provided in the input data.

Successful exploitation causes a denial of service by crashing the routing process (rpd), impacting network availability. There is no impact on confidentiality or integrity. The attack requires adjacent network access but no privileges or user interaction.

Patch status is not yet confirmed — check the Juniper Networks vendor advisory for current remediation guidance. Until a fix is confirmed, network operators should consider limiting adjacent network access to trusted entities and monitor for unusual routing process crashes. No official fix or temporary workaround is provided in the available data.