CVE-2026-102066: 1284 in Juniper Networks Junos OS

This vulnerability (CVE-2026-102066) exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. The flaw is due to improper validation of specified quantity in input, specifically when RSVP is enabled on the receiving interface. An adjacent unauthenticated attacker can exploit this by sending a malformed RSVP packet, resulting in a denial of service condition. The vulnerability has a CVSS v3.1 base score of 6.5, indicating medium severity, with attack vector being adjacent network, low attack complexity, no privileges required, no user interaction, and impact limited to availability.

Successful exploitation allows an adjacent unauthenticated attacker to cause a denial of service on the affected device, impacting availability. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory content is provided, users should monitor Juniper Networks advisories for updates. Until a fix is available, consider disabling RSVP on interfaces where it is not required to reduce exposure.