CVE-2026-102071: CWE-617 Reachable Assertion in Juniper Networks Junos OS

This vulnerability (CVE-2026-102071) involves a reachable assertion failure in the routing protocol daemon (rpd) component of Juniper Networks Junos OS and Junos OS Evolved. An unauthenticated attacker with adjacency can send a crafted RSVP packet that triggers the assertion, resulting in a denial of service condition. The vulnerability affects multiple versions of Junos OS and Junos OS Evolved, including specific release ranges and variants. The CVSS 3.1 score of 6.5 reflects a medium severity with no confidentiality or integrity impact but a significant availability impact. The vulnerability is identified as CWE-617 (Reachable Assertion). No vendor advisory or patch information is provided in the input, so patch status is unconfirmed.

The impact is a denial of service (DoS) condition caused by an assertion failure in the routing protocol daemon. This can disrupt network routing services on affected Junos OS devices. There is no impact on confidentiality or integrity. The attack requires adjacency but no authentication, making it a risk for adjacent network attackers. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, network administrators should consider limiting adjacency to untrusted sources and monitor for suspicious RSVP packets. No official patch links were provided in the input data.