CVE-2026-102058: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-102058) involves a reachable assertion in the bfdd daemon component of Juniper Networks Junos OS and Junos OS Evolved platforms. An unauthenticated attacker with adjacent network access can send specially crafted BFD session traffic to trigger the assertion, causing the bfdd daemon to restart and resulting in a denial of service condition. The vulnerability affects multiple specific version ranges of Junos OS and Junos OS Evolved, as detailed in the affectedVersions field. The CVSS 3.1 score is 6.5 (AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), reflecting a medium severity denial of service impact without confidentiality or integrity loss. No known exploits have been reported in the wild. Patch or mitigation status is not explicitly stated in the provided information.

Successful exploitation results in a denial of service by restarting the bfdd daemon, potentially disrupting network operations dependent on BFD sessions. There is no impact on confidentiality or integrity. The attack requires adjacent network access but no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, network administrators should consider limiting access to the bfdd daemon from untrusted adjacent networks to reduce exposure. Monitor vendor communications for official fixes or updates.