CVE-2026-102072: CWE-409 Improper Handling of Highly Compressed Data (Data Amplification) in Juniper Networks Junos OS

This vulnerability (CVE-2026-102072) arises from improper handling of highly compressed data (CWE-409) in the gRPC library component na-grpcd of Juniper Networks Junos OS. An authenticated attacker with network access can send a compressed gRPC request that triggers a denial of service condition. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability. The affected versions span multiple release trains of Junos OS prior to certain patch levels. No vendor advisory or patch information is provided in the input, so patch availability is unknown.

The vulnerability allows an authenticated network attacker to cause a denial of service on affected Junos OS devices by exploiting improper handling of compressed gRPC requests. There is no impact on confidentiality or integrity. The availability impact could disrupt network operations relying on the affected Junos OS versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability requires authentication and network access, restricting access to management interfaces and applying any available Juniper updates when released are recommended interim measures.