CVE-2026-102183: CWE-1284 Improper Validation of Specified Quantity in Input in Juniper Networks Junos OS

This vulnerability (CVE-2026-102183) is an improper validation of specified quantity in input (CWE-1284) in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved. A configured BGP EVPN peer can trigger an rpd crash by sending a specially crafted NLRI, resulting in denial of service. The CVSS 3.1 base score is 7.5 (high), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (no confidentiality or integrity impact). The affected versions span multiple releases prior to certain maintenance releases as detailed in the affectedVersions list.

Successful exploitation causes the routing protocol daemon (rpd) to crash, resulting in denial of service. There is no impact on confidentiality or integrity. The vulnerability can be triggered remotely by a configured BGP EVPN peer without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Until a patch is available, limit exposure by restricting BGP EVPN peer configurations to trusted entities and monitor for anomalous routing daemon crashes.