CVE-2026-102044: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-102044) involves a reachable assertion failure in the rpd process of Juniper Networks Junos OS and Junos OS Evolved. A BGP-LS peer configured on the device can send a specially crafted BGP-LS update that triggers the assertion, causing the rpd process to crash and resulting in a denial of service. The vulnerability affects a wide range of Junos OS versions and their Evolved counterparts, as explicitly enumerated in the affectedVersions field. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without authentication or user interaction, with a high impact on availability but no impact on confidentiality or integrity.

Successful exploitation results in denial of service of the rpd process on affected Junos OS devices, disrupting routing protocol operations. There is no impact on confidentiality or integrity. The attack requires no privileges or user interaction and can be launched remotely by a configured BGP-LS peer.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or monitor BGP-LS peer configurations to trusted entities to reduce exposure. No vendor advisory or patch information was provided in the input data.