CVE-2026-102065: CWE-1284 Improper Validation of Specified Quantity in Input in Juniper Networks Junos OS

This vulnerability (CVE-2026-102065) is an improper validation of specified quantity in input (CWE-1284) in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A remote unauthenticated BGP peer can send a malformed BGP-signaled SRv6 service route when SRv6 dynamic tunnels are enabled, causing the rpd process to crash. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved as specified. The CVSS 3.1 base score is 7.5 (high severity) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating network attack vector, low attack complexity, no privileges or user interaction required, unchanged scope, no confidentiality or integrity impact, but high impact on availability.

Successful exploitation causes the routing protocol daemon (rpd) to crash, resulting in denial of service. There is no impact on confidentiality or integrity. The vulnerability can be triggered remotely by an unauthenticated BGP peer if SRv6 dynamic tunnels are enabled, potentially disrupting network routing services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, consider disabling SRv6 dynamic tunnels if feasible to mitigate exposure. Monitor vendor advisories for updates and apply official fixes once released.