CVE-2026-101975: Juniper Networks Junos OS

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service via OSPF traffic processed while OSPF Source Packet Routing best-route Prefix-SID installation is configured.

Affected products

• Juniper Networks Junos OS: before 23.2R2-S7.7 (fixed in 23.2R2-S7.7); from 23.4, before 23.4R2-S8.13 (fixed in 23.4R2-S8.13); from 24.2, before 24.2R2-S5.5 (fixed in 24.2R2-S5.5); from 24.4, before 24.4R2-S5 (fixed in 24.4R2-S5); from 25.2, before 25.2R2-S2 (fixed in 25.2R2-S2); from 25.4, before 25.4R1-S3 (fixed in 25.4R1-S3); …
• Juniper Networks Junos OS Evolved: before 23.2R2-S7.7-EVO (fixed in 23.2R2-S7.7-EVO); from 23.4, before 23.4R2-S8.11-EVO (fixed in 23.4R2-S8.11-EVO); from 24.2, before 24.2R2-S5.6-EVO (fixed in 24.2R2-S5.6-EVO); from 24.4, before 24.4R2-S5-EVO (fixed in 24.4R2-S5-EVO); from 25.2, before 25.2R2-S2-EVO (fixed in 25.2R2-S2-EVO); from 25.4, before 25.4R1-S3-EVO (fixed in 25.4R1-S3-EVO); …

Published 2026-10-14. Last modified 2026-10-15.